How severe is CVE-2024-0085?

CVE-2024-0085 has a CVSS 3.x base score of 6.3, rated medium severity. It is exploitable over local access with high attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability high.

Is CVE-2024-0085 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (2nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-0085?

CVE-2024-0085 primarily affects Nvidia Virtual Gpu. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2024-0085?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2024-0085 have an EU (EUVD) identifier?

Yes. CVE-2024-0085 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-15886.

When was CVE-2024-0085 published?

CVE-2024-0085 was published on 2024-06-13 and last updated on 2026-06-17.

CVE-2024-0085

CVE-2024-0085 is a medium-severity vulnerability in Nvidia Virtual Gpu with a CVSS 3.x base score of 6.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-266.

Key facts

Severity: Medium (CVSS 3.x base score 6.3)
EPSS exploit prediction: 0% (2nd percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-15886
Weakness: CWE-266
Affected product: Nvidia Virtual Gpu
Published: 2024-06-13
Last modified: 2026-06-17

Description

NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of service.

Frequently asked questions

What is CVE-2024-0085?: NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of service.
How severe is CVE-2024-0085?: CVE-2024-0085 has a CVSS 3.x base score of 6.3, rated medium severity. It is exploitable over local access with high attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability high.
Is CVE-2024-0085 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (2nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-0085?: CVE-2024-0085 primarily affects Nvidia Virtual Gpu. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2024-0085?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2024-0085 have an EU (EUVD) identifier?: Yes. CVE-2024-0085 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-15886.
When was CVE-2024-0085 published?: CVE-2024-0085 was published on 2024-06-13 and last updated on 2026-06-17.

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5551

Affected products (2)

cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:cloud_gaming:*:*:*:*:*:*:*:*

More vulnerabilities in Nvidia Virtual Gpu

CVE-2023-0189 — High (CVSS 8.8): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code…
CVE-2022-34669 — High (CVSS 8.8): NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular…
CVE-2022-28182 — High (CVSS 8.5): NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll),…
CVE-2022-28181 — High (CVSS 8.5): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an…
CVE-2023-31027 — High (CVSS 8.2): NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege…
CVE-2024-0107 — High (CVSS 7.8): NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular…

All CVEs affecting Nvidia Virtual Gpu →

Other CWE-266 (Incorrect Privilege Assignment) vulnerabilities

CVE-2026-23800 — Critical (CVSS 10.0): Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue…
CVE-2025-41115 — Critical (CVSS 10.0): SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage…
CVE-2024-9479 — Critical (CVSS 10.0): Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege…
CVE-2024-9478 — Critical (CVSS 10.0): Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege…
CVE-2026-42368 — Critical (CVSS 9.9): A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A…
CVE-2026-32922 — Critical (CVSS 9.9): OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with…

Browse all CWE-266 (Incorrect Privilege Assignment) vulnerabilities →