Threat database

NVIDIA Virtual GPU Manager for Linux has a firmware vulnerability involving an out-of-bounds read. Exploitation could result in code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability is identified as CWE-125 and has a high severity CVSS score of 7.8.

NVIDIA Virtual GPU Manager for Linux contains a kernel mode layer vulnerability involving an out-of-bounds read. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability is identified as CWE-125 and has a high severity rating with a CVSS score of 7.8. No specific affected versions or patches are currently provided.

CVE-2026-47520 is a high-severity vulnerability in the NVIDIA vGPU Virtual GPU Manager for Linux kernel mode layer. It involves an out-of-bounds read that could be exploited by an attacker with local privileges. Successful exploitation may lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-47519 is a high-severity vulnerability in the NVIDIA vGPU Virtual GPU Manager for Linux kernel mode layer. It involves an out-of-bounds read that could be exploited by an attacker with local privileges. Successful exploitation may result in code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-47503 is a high-severity vulnerability in the NVIDIA Virtual GPU Manager for Linux. It involves an out-of-bounds write caused by a crafted RPC message with invalid performance state list size parameters sent by a guest VM user. Exploitation could lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure.

CVE-2026-47499 is a high-severity vulnerability in the NVIDIA Virtual GPU Manager for Windows and Linux. It involves an out-of-bounds read in the kernel mode layer that could be exploited by a guest. Successful exploitation may lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-47498 is a high-severity vulnerability in NVIDIA Virtual GPU Manager's GPU System Processor plugin. It involves an out-of-bounds write triggered by a specially crafted RPC message from a guest VM user. Exploitation could lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure.

CVE-2026-47497 is a high-severity vulnerability in NVIDIA Virtual GPU Manager's GPU System Processor tracing component. It involves a time-of-check to time-of-use (TOCTOU) race condition that allows a guest VM user to send crafted data through a shared buffer, potentially leading to unauthorized code execution, privilege escalation, data tampering, denial of service, and information disclosure.

CVE-2026-47495 is a high-severity vulnerability in NVIDIA Virtual GPU Manager for Windows and Linux. It involves an out-of-bounds write in the kernel mode layer that could be exploited by a user with limited privileges. Successful exploitation may result in code execution, denial of service, privilege escalation, information disclosure, and data tampering.

NVIDIA Virtual GPU Manager contains a missing authorization vulnerability in its GPU kernel driver that allows a guest to access privileged host GPU resources without proper authorization. Exploitation could lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure. The vulnerability has a high severity score of 7.8. No affected versions or patch information are provided.

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could inject crafted text into the kernel log because the supplied version string is not properly sanitized. A successful exploit of this vulnerability might lead to denial of service and data tampering.

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure.

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker with local access could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where a user could cause improper locking. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause uncontrolled kernel log generation by repeatedly invoking an interface that emits unrate-limited error messages. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a memory leak in error paths leading to kernel memory exhaustion. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service.