DS
Product
DGX Spark
20
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 10Medium 7Low 3
Watch
Add DGX Spark to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24263 | 8.2 | Aug 25 | NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference Affected: 0 to 1.110.12 |
| CVE-2026-47626 | 8.2 | Aug 25 | NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write Affected: 0 to 1.110.12 |
| CVE-2026-24262 | 8.2 | Aug 25 | NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write Affected: 0 to 1.110.12 |
| CVE-2026-24218 | 8.1 | May 20 | NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple… Affected: before OTA0 |
| CVE-2025-33195 | 7.8 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations Affected: All versions prior to OTA0 |
| CVE-2025-33190 | 7.8 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write Affected: All versions prior to OTA0 |
| CVE-2025-33189 | 7.8 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write Affected: All versions prior to OTA0 |
| CVE-2025-33188 | 7.8 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls Affected: All versions prior to OTA0 |
| CVE-2025-33187 | 7.8 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas Affected: All versions prior to OTA0 |
| CVE-2025-33194 | 7.1 | Nov 25 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data Affected: All versions prior to OTA0 |
Showing 10
