CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,238 CVEs published, 241 critical, and 5 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,238
Show in the list
Critical, last 7 days
241
Show in the list
Healthcare-tagged, last 7 days
6
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product nvidia:dgx_spark. Show all products

Free: a daily email for up to 3 products and the weekly digest. No card, no password. By continuing you agree to the Terms and Privacy Policy.

20 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2025-33187Critical 9.3NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas.
Assigned by nvidia
Nov 25, 2025
CVE-2025-33188High 8.0NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls.
Assigned by nvidia
Nov 25, 2025
CVE-2025-33189High 7.8NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write.
Assigned by nvidia
Nov 25, 2025
CVE-2025-33190Medium 6.7NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write.
Assigned by nvidia
Nov 25, 2025
CVE-2025-33191Medium 5.7NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read.
Assigned by nvidia
Nov 25, 2025
CVE-2025-33192Medium 5.7NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read.
Assigned by nvidia
Nov 25, 2025
CVE-2025-33193Medium 5.7NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper validation of integrity.
Assigned by nvidia
Nov 25, 2025
CVE-2025-33194Medium 5.7NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data.
Assigned by nvidia
Nov 25, 2025
CVE-2025-33195Medium 4.4NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations.
Assigned by nvidia
Nov 25, 2025
CVE-2025-33196Medium 4.4NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused.
Assigned by nvidia
Nov 25, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Essential cookies only, unless you allow a Google ads cookie. See our .