Arbitrary Code Execution Vulnerability in NVIDIA Nsight Visual Studio
CVE-2025-33229

7.3HIGH

Key Information:

Vendor

Nvidia
Status
Cuda Toolkit
Vendor
CVE Published:
20 January 2026

What is CVE-2025-33229?

NVIDIA Nsight Visual Studio for Windows has a vulnerability in the Nsight Monitor component that enables attackers to execute arbitrary code with the same privileges as the Nsight Visual Studio Edition Monitor application. If successfully exploited, this vulnerability could allow for various malicious activities including privilege escalation, unauthorized code execution, data corruption, denial of service, and the potential disclosure of sensitive information.

Affected Version(s)

CUDA Toolkit Windows All versions prior to CUDA Toolkit 13.1

References

https://nvd.nist.gov/vuln/detail/CVE-2025-33229
https://www.cve.org/CVERecord?id=CVE-2025-33229
https://nvidia.custhelp.com/app/answers/detail/a_id/5755

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.