DS
Product
DGX Spark
20
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 10Medium 7Low 3
Watch
Add DGX Spark to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24263 | 8.2 | Aug 25 | NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference Affected: 0 to 1.110.12 |
| CVE-2026-47626 | 8.2 | Aug 25 | NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write Affected: 0 to 1.110.12 |
| CVE-2026-24262 | 8.2 | Aug 25 | NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write Affected: 0 to 1.110.12 |
| CVE-2026-24218 | 8.1 | May 20 | NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple… Affected: before OTA0 |
| CVE-2025-33195 | 7.8 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations Affected: All versions prior to OTA0 |
| CVE-2025-33190 | 7.8 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write Affected: All versions prior to OTA0 |
| CVE-2025-33189 | 7.8 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write Affected: All versions prior to OTA0 |
| CVE-2025-33188 | 7.8 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls Affected: All versions prior to OTA0 |
| CVE-2025-33187 | 7.8 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas Affected: All versions prior to OTA0 |
| CVE-2025-33194 | 7.1 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data Affected: All versions prior to OTA0 |
| CVE-2026-47624 | 6.0 | Aug 25 | NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user Affected: 0 to 1.110.12 |
| CVE-2026-24225 | 6.0 | Aug 25 | NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read Affected: 0 to 1.110.12 |
| CVE-2025-33197 | 5.5 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a NULL pointer dereference Affected: All versions prior to OTA0 |
| CVE-2025-33196 | 5.5 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused Affected: All versions prior to OTA0 |
| CVE-2025-33193 | 5.5 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper validation of integrity Affected: All versions prior to OTA0 |
| CVE-2025-33192 | 5.5 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read Affected: All versions prior to OTA0 |
| CVE-2025-33191 | 5.5 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read Affected: All versions prior to OTA0 |
| CVE-2025-33199 | 3.8 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect control flow behavior Affected: All versions prior to OTA0 |
| CVE-2025-33200 | 3.3 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused Affected: All versions prior to OTA0 |
| CVE-2025-33198 | 3.3 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused Affected: All versions prior to OTA0 |
Showing 20