Nvidia Container Toolkit
Vendor:
First CVE: Sep 26, 2024 · Active for 1 year
7
Total CVEs
More Total CVEs than 83% of tracked products
3.5
Avg CVEs / Year
Higher CVE frequency than 82% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 33% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Nvidia Container Toolkit over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 26, 2024
21 months ago
Most Recent CVE
Feb 12, 2025
527 days ago
CVE Severity & Scoring
Nvidia Container Toolkit7 CVEs
14%
29%
57%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (42.9%)
High4 (57.1%)
Unknown0 (0.0%)
User Interaction
None1 (14.3%)
Unknown0 (0.0%)
Required6 (85.7%)
Privileges Required
Low2 (28.6%)
High2 (28.6%)
None3 (42.9%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-0132HIGH NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container i | Sep 26, 2024 | 8.3 | 61 | NO | YES |
CVE-2025-23359HIGH NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain acce | Feb 12, 2025 | 8.1 | 28 | NO | NO |
CVE-2024-0136HIGH NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host | Jan 28, 2025 | 8.4 | 25 | NO | NO |
CVE-2024-0135HIGH NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of | Jan 28, 2025 | 7.6 | 24 | NO | NO |
CVE-2024-0137MEDIUM NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace | Jan 28, 2025 | 6.5 | 20 | NO | NO |
CVE-2024-0134MEDIUM NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on | Nov 5, 2024 | 4.1 | 17 | NO | NO |
NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host | Sep 26, 2024 | 3.4 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
14.3% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Nvidia Container Toolkit
Top CWEs
Versions
No cataloged versions.