CVE-2026-47493
HighCVSS 7.8Summary
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit might lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure.
Risk Assessment
The risk includes unauthorized access to critical GPU resources, potentially leading to system integrity compromise, data leakage, and service disruption.
Recommendation
Apply updates provided by NVIDIA for vGPU software. Restrict access to virtualized environments and monitor guest activity for suspicious behavior.
Other vulnerabilities in NVIDIA vGPU
See all- CVE-2026-24201Medium
NVIDIA vGPU software has a vulnerability in the virtual GPU manager that allows an attacker to cause an out-of-bound access. Successful exploitation could lead to data tampering, denial of service, or information disclosure.
- CVE-2026-24200High
NVIDIA vGPU software has a use-after-free vulnerability in the virtual GPU manager. Successful exploitation may lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.
Original NVD description (English source)
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS