Threat database

CVE-2026-47586 is a use-after-free vulnerability in the NVIDIA GeForce GPU Display Driver kernel module for Windows and Linux. Exploitation could allow an attacker to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability has a CVSS score of 6.4, indicating a medium severity level. No specific affected versions or patches are provided in the available data.

CVE-2026-19445 is a critical use-after-free vulnerability (CWE-416) in the Python CPython implementation affecting TLS servers that use the sni_callback to assign different SSL contexts per connection without retaining references to the original SSLContext. This can cause server crashes or calls through freed pointers. TLS clients are not affected. The vulnerability impacts multiple CPython versions prior to specific patched releases. Mitigation involves keeping a reference to every SSLContext that sets sni_callback for the server's lifetime.

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the file admin/table_booking.php. This manipulation of the argument Name causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.

CVE-2026-103231 is a medium severity SQL injection vulnerability in the AdithyaYelloju Restaurant-Management-System affecting the Order Cancellation component. The flaw exists in the mysqli_query function within User/cancel.php, where manipulation of the ID argument can lead to SQL injection. The vulnerability can be exploited remotely without authentication. Although the issue was reported early to the project, no response or fix has been provided yet. Public exploit code is available, but no known active exploitation has been reported.

Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files. This issue affects MediaWiki Wikibase extension: 1.46, 1.45, and 1.43.

CVE-2026-47539 is a vulnerability in the NVIDIA Virtual GPU Manager for Linux involving incorrect numeric type conversion in the kernel mode layer. Exploitation could lead to severe impacts including code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS score of 6.7, indicating a medium severity level. No affected versions or patch information are provided in the available data.

CVE-2026-47496 is a high-severity vulnerability in the NVIDIA Virtual GPU Manager for Linux. It involves an out-of-bounds write triggered by a guest VM user sending a specially crafted RPC call to the host. Exploitation could lead to privilege escalation, data tampering, and denial of service. No specific affected versions or patch information are provided.

CVE-2026-47574 is a vulnerability in NVIDIA Virtual GPU Manager for Linux involving incorrect resource transfer between spheres. Exploitation could allow attackers to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability has a high severity score of 7.8. No affected versions or patch information are provided in the available data.

CVE-2026-47544 is a high-severity vulnerability in the NVIDIA Virtual GPU Manager for Linux. It involves an out-of-bounds read in the kernel mode layer. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS score of 7.8. No specific affected versions or patch information is provided.

CVE-2026-47541 is a high-severity vulnerability in the NVIDIA Virtual GPU Manager for Linux. It involves an out-of-bounds write in the kernel mode layer. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. No specific affected versions or patch information is provided. The vulnerability requires local access with low privileges and no user interaction. The CVSS score is 7.8, indicating a significant risk if exploited.

CVE-2026-47536 is a high-severity vulnerability in the NVIDIA Virtual GPU Manager for Linux. It involves an out-of-bounds read in the kernel mode layer, which could be exploited by an attacker with limited privileges. Successful exploitation may result in code execution, denial of service, privilege escalation, information disclosure, and data tampering.

NVIDIA Virtual GPU Manager for Linux has a firmware vulnerability involving an out-of-bounds read. Exploitation could result in code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability is identified as CWE-125 and has a high severity CVSS score of 7.8.

NVIDIA Virtual GPU Manager for Linux contains a kernel mode layer vulnerability involving an out-of-bounds read. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability is identified as CWE-125 and has a high severity rating with a CVSS score of 7.8. No specific affected versions or patches are currently provided.

CVE-2026-47520 is a high-severity vulnerability in the NVIDIA vGPU Virtual GPU Manager for Linux kernel mode layer. It involves an out-of-bounds read that could be exploited by an attacker with local privileges. Successful exploitation may lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-47519 is a high-severity vulnerability in the NVIDIA vGPU Virtual GPU Manager for Linux kernel mode layer. It involves an out-of-bounds read that could be exploited by an attacker with local privileges. Successful exploitation may result in code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-47503 is a high-severity vulnerability in the NVIDIA Virtual GPU Manager for Linux. It involves an out-of-bounds write caused by a crafted RPC message with invalid performance state list size parameters sent by a guest VM user. Exploitation could lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure.

CVE-2026-47499 is a high-severity vulnerability in the NVIDIA Virtual GPU Manager for Windows and Linux. It involves an out-of-bounds read in the kernel mode layer that could be exploited by a guest. Successful exploitation may lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-47498 is a high-severity vulnerability in NVIDIA Virtual GPU Manager's GPU System Processor plugin. It involves an out-of-bounds write triggered by a specially crafted RPC message from a guest VM user. Exploitation could lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure.

CVE-2026-47497 is a high-severity vulnerability in NVIDIA Virtual GPU Manager's GPU System Processor tracing component. It involves a time-of-check to time-of-use (TOCTOU) race condition that allows a guest VM user to send crafted data through a shared buffer, potentially leading to unauthorized code execution, privilege escalation, data tampering, denial of service, and information disclosure.