Threat database

CVE-2026-47530 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an out-of-bounds write in the kernel mode layer. Exploitation could allow an attacker with limited privileges to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data.

CVE-2026-47528 is a vulnerability in the NVIDIA GeForce GPU Display Driver firmware for Windows and Linux. It involves an access of an uninitialized pointer, which could be exploited by an attacker to achieve code execution, denial of service, privilege escalation, information disclosure, or data tampering. The vulnerability has a high severity rating with a CVSS score of 7.8. No specific affected versions or patch information is provided.

CVE-2026-47523 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an out-of-bounds write in the kernel mode layer. Exploitation could allow attackers to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data.

CVE-2026-47516 is a use-after-free vulnerability in the NVIDIA GPU Display Driver for Windows and Linux. It allows an unprivileged user to potentially execute code, escalate privileges, tamper with data, cause denial of service, or disclose information. The vulnerability has a high severity score of 7.8. No specific affected versions or patch information are provided.

CVE-2026-47514 is a vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It exists in the kernel mode layer and allows a user to cause exposure of kernel stack contents, including sensitive data such as return addresses and pointers. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a high severity with a CVSS score of 7.8. No specific affected versions or patch information are provided.

CVE-2026-47513 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an out-of-bounds read in the kernel mode layer that could be exploited by a user with limited privileges. Successful exploitation may result in code execution, denial of service, privilege escalation, information disclosure, and data tampering. No specific affected versions or patch information are provided.

CVE-2026-47512 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an out-of-bounds read in the kernel mode layer that can lead to kernel information disclosure. Exploitation could potentially allow code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-47511 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an out-of-bounds write in the kernel mode layer that could be exploited by a user with limited privileges. Successful exploitation may result in code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-47510 is an integer overflow vulnerability in the kernel mode layer of NVIDIA GeForce GPU Display Drivers for Windows and Linux. This flaw allows a local user with limited privileges to trigger an integer overflow, resulting in an out-of-bounds write to GPU memory. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a high severity with a CVSS score of 7.8. No specific affected versions or patch information is provided.

CVE-2026-47508 is a vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an incorrect conversion between numeric types in the kernel mode layer. Exploitation could allow code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a high severity score of 7.8 CVSS 3.1. No specific affected versions or patch information is provided.

CVE-2026-47507 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves improper validation of array indices in the kernel mode layer, which can lead to out-of-bounds array access. Exploiting this flaw could allow an attacker with limited privileges to execute arbitrary code, cause denial of service, escalate privileges, disclose information, or tamper with data.

CVE-2026-47505 is a use-after-free vulnerability in the kernel mode layer of the NVIDIA GPU Display Driver for Windows. Exploiting this flaw could allow an attacker with local access to execute arbitrary code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability has a high severity rating with a CVSS score of 7.8. No specific affected versions or patch information is provided.

CVE-2026-47504 is a high-severity vulnerability in the NVIDIA Linux GPU Display Driver's NGX updater component. It involves a type confusion flaw in an outdated embedded cryptographic library. Exploitation could allow an attacker with local privileges to execute code, cause denial of service, disclose information, or tamper with data.

CVE-2026-47502 is an integer overflow vulnerability in the NVIDIA vGPU Virtual GPU Manager kernel mode layer for Windows and Linux. A guest user could exploit this flaw to cause memory corruption. Successful exploitation may result in code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a high severity rating with a CVSS score of 7.8. No specific affected versions or patches are provided in the available data.

CVE-2026-47501 is a high-severity vulnerability in the NVIDIA GPU Display Driver for Linux. It involves an out-of-bounds write in the kernel mode layer triggered by supplying mismatched memory buffers during event buffer setup. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CISA has issued a warning about a critical vulnerability in MikroTik RouterOS that allows for remote code execution or denial-of-service conditions without authentication. This flaw poses a significant risk to affected systems if exploited. No specific affected versions or patch information are currently provided.

CVE-2026-47500 is a use-after-free vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It occurs in the kernel mode layer due to improper cleanup of reference counts during error handling. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a high severity with a CVSS score of 7.8. No affected versions or patch information are provided in the available data.

CVE-2026-47494 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Linux involving an externally-controlled format string issue. Exploitation could allow an attacker with local privileges to execute arbitrary code, escalate privileges, tamper with data, cause denial of service, or disclose sensitive information. The vulnerability requires local access and low complexity to exploit, with no user interaction needed. No specific affected versions or patches are currently detailed.

CVE-2026-47491 is a vulnerability in the NVIDIA GeForce GPU Display Driver for Linux. It involves improper resource shutdown or release in the kernel mode layer, allowing an unprivileged user to cause memory resources to be improperly released. This can leave a memory mapping accessible after the underlying memory is reused. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.