CVE-2025-33229
published 2026-01-20CVE-2025-33229: NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the…
PriorityP338high7.3CVSS 3.1
AVLACLPRLUIRSUCHIHAH
EPSS
0.16%
5.5th percentile
NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the NVIDIA Nsight Visual Studio Edition Monitor application. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nvidia-cuda-toolkit | — | — |
| nvidia | cuda_toolkit | < 13.1.0 | 13.1.0 |
| nvidia | cuda_toolkit | — | — |
CVSS provenance
nvdv3.17.3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
osv7.3HIGH
vendor_debian7.3HIGH
vendor_redhat7.3HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-65x9-9gp9-wcq3: NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileg
ghsa_unreviewed·2026-01-20
CVE-2025-33229 [HIGH] CWE-427 GHSA-65x9-9gp9-wcq3: NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileg
NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the NVIDIA Nsight Visual Studio Edition Monitor application. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
OSV
CVE-2025-33229: NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileg
osv·2026-01-20·CVSS 7.3
CVE-2025-33229 [HIGH] CVE-2025-33229: NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileg
NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the NVIDIA Nsight Visual Studio Edition Monitor application. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
Red Hat
nsight-systems: NVIDIA Nsight Visual Studio for Windows: Arbitrary Code Execution and Privilege Escalation in Nsight Monitor
vendor_redhat·2026-01-20·CVSS 7.3
CVE-2025-33229 [HIGH] CWE-427 nsight-systems: NVIDIA Nsight Visual Studio for Windows: Arbitrary Code Execution and Privilege Escalation in Nsight Monitor
nsight-systems: NVIDIA Nsight Visual Studio for Windows: Arbitrary Code Execution and Privilege Escalation in Nsight Monitor
NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the NVIDIA Nsight Visual Studio Edition Monitor application. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
A flaw was found in NVIDIA Nsight Visual Studio for Windows, specifically within the Nsight Monitor component. An attacker can exploit this vulnerability to execute arbitrary code with the same privileges as the Nsight Monitor application. This can lead to escalation of privileges, allowing the
Debian
CVE-2025-33229: nvidia-cuda-toolkit - NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monit...
vendor_debian·2025·CVSS 7.3
CVE-2025-33229 [HIGH] CVE-2025-33229: nvidia-cuda-toolkit - NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monit...
NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the NVIDIA Nsight Visual Studio Edition Monitor application. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
Wiz
CVE-2025-33230 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 3.3
CVE-2025-33230 [LOW] CVE-2025-33230 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-33230 :
CUDA Toolkit vulnerability analysis and mitigation
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
Source : NVD
## 7.3
Score
Published January 20, 2026
Severity HIGH
CNA Score 7.3
Affected Technologies
CUDA Toolkit
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 6.1
Exploitation Probability (EPSS) N/A
Affected packages and libraries
nvidia-cuda-tool
Wiz
CVE-2025-33228 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 3.3
CVE-2025-33228 [LOW] CVE-2025-33228 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-33228 :
CUDA Toolkit vulnerability analysis and mitigation
NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the process_nsys_rep_cli.py script if the script is invoked manually. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Source : NVD
## 7.3
Score
Published January 20, 2026
Severity HIGH
CNA Score 7.3
Affected Technologies
CUDA Toolkit
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 6.1
Exploitation Probability (EPSS) N/A
Affected
Wiz
CVE-2025-33231 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 3.3
CVE-2025-33231 [LOW] CVE-2025-33231 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-33231 :
CUDA Toolkit vulnerability analysis and mitigation
NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL search paths. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service and information disclosure.
Source : NVD
## 6.7
Score
Published January 20, 2026
Severity MEDIUM
CNA Score 6.7
Affected Technologies
CUDA Toolkit
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 4.9
Exploitation Probability (EPSS) N/A
Affected packages and libraries
Wiz
CVE-2025-33229 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 3.3
CVE-2025-33229 [LOW] CVE-2025-33229 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-33229 :
CUDA Toolkit vulnerability analysis and mitigation
NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the NVIDIA Nsight Visual Studio Edition Monitor application. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
Source : NVD
## 7.3
Score
Published January 20, 2026
Severity HIGH
CNA Score 7.3
Affected Technologies
CUDA Toolkit
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 5.2
Exploitation Probability (EPSS) N/A
Affected packages and libr
2026-01-20
Published