Threat database

CVE-2026-47513 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an out-of-bounds read in the kernel mode layer that could be exploited by a user with limited privileges. Successful exploitation may result in code execution, denial of service, privilege escalation, information disclosure, and data tampering. No specific affected versions or patch information are provided.

CVE-2026-47512 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an out-of-bounds read in the kernel mode layer that can lead to kernel information disclosure. Exploitation could potentially allow code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-47511 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an out-of-bounds write in the kernel mode layer that could be exploited by a user with limited privileges. Successful exploitation may result in code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-47510 is an integer overflow vulnerability in the kernel mode layer of NVIDIA GeForce GPU Display Drivers for Windows and Linux. This flaw allows a local user with limited privileges to trigger an integer overflow, resulting in an out-of-bounds write to GPU memory. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a high severity with a CVSS score of 7.8. No specific affected versions or patch information is provided.

CVE-2026-47508 is a vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an incorrect conversion between numeric types in the kernel mode layer. Exploitation could allow code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a high severity score of 7.8 CVSS 3.1. No specific affected versions or patch information is provided.

CVE-2026-47507 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves improper validation of array indices in the kernel mode layer, which can lead to out-of-bounds array access. Exploiting this flaw could allow an attacker with limited privileges to execute arbitrary code, cause denial of service, escalate privileges, disclose information, or tamper with data.

CVE-2026-47505 is a use-after-free vulnerability in the kernel mode layer of the NVIDIA GPU Display Driver for Windows. Exploiting this flaw could allow an attacker with local access to execute arbitrary code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability has a high severity rating with a CVSS score of 7.8. No specific affected versions or patch information is provided.

CVE-2026-47504 is a high-severity vulnerability in the NVIDIA Linux GPU Display Driver's NGX updater component. It involves a type confusion flaw in an outdated embedded cryptographic library. Exploitation could allow an attacker with local privileges to execute code, cause denial of service, disclose information, or tamper with data.

CVE-2026-47502 is an integer overflow vulnerability in the NVIDIA vGPU Virtual GPU Manager kernel mode layer for Windows and Linux. A guest user could exploit this flaw to cause memory corruption. Successful exploitation may result in code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a high severity rating with a CVSS score of 7.8. No specific affected versions or patches are provided in the available data.

CVE-2026-47501 is a high-severity vulnerability in the NVIDIA GPU Display Driver for Linux. It involves an out-of-bounds write in the kernel mode layer triggered by supplying mismatched memory buffers during event buffer setup. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-47500 is a use-after-free vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It occurs in the kernel mode layer due to improper cleanup of reference counts during error handling. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a high severity with a CVSS score of 7.8. No affected versions or patch information are provided in the available data.

CVE-2026-47494 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Linux involving an externally-controlled format string issue. Exploitation could allow an attacker with local privileges to execute arbitrary code, escalate privileges, tamper with data, cause denial of service, or disclose sensitive information. The vulnerability requires local access and low complexity to exploit, with no user interaction needed. No specific affected versions or patches are currently detailed.

CVE-2026-47491 is a vulnerability in the NVIDIA GeForce GPU Display Driver for Linux. It involves improper resource shutdown or release in the kernel mode layer, allowing an unprivileged user to cause memory resources to be improperly released. This can leave a memory mapping accessible after the underlying memory is reused. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA DeepStream versions up to 0-9.0.1 contain an integer overflow vulnerability triggered by crafted tensor dimensions in a YAML configuration file. Exploitation could lead to denial of service, information disclosure, or data tampering. The vulnerability has a high severity with a CVSS score of 7.8. No vendor patch or advisory is currently provided. No known exploits are reported in the wild.

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure.

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service.