CVE-2025-23263CWE-279

NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of…

High · published July 17, 2025

CVSS v3.1
7.6
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of service on the VLAN.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.6th percentile
Weakness
CWE-279 · Incorrect Execution-Assigned Permissions
Published
2025-07-17T17:19Z
EPSS history
Timeline
  • 17 JUL 17:19Z
    NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of…
    cvelistv5