CVE-2026-47495
Awaiting Analysis Awaiting Analysis - Queue

Out-of-Bounds Write in NVIDIA vGPU Virtual GPU Manager

Vulnerability report for CVE-2026-47495, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-30

Last updated on: 2026-10-01

Assigner: NVIDIA Corporation

Description

NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-10-01
Generated
2026-10-19
AI Q&A
2026-09-30
EPSS Evaluated
2026-10-18
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nvidia vgpu_virtual_gpu_manager *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

NVIDIA vGPU Virtual GPU Manager has a flaw in its kernel mode layer allowing an out-of-bounds write. This could let a user execute arbitrary code, disrupt services, escalate privileges, access sensitive data, or alter stored information.

Detection Guidance

Detection of this vulnerability requires checking for specific indicators related to NVIDIA vGPU Virtual GPU Manager. Monitor for unusual kernel mode layer activity or out-of-bounds write attempts. Use system logs to identify crashes or privilege escalation events. No specific commands are provided in the available context.

Impact Analysis

If exploited, it may allow attackers to run malicious code on your system, crash applications or the OS, gain higher system access, steal confidential data, or modify files without authorization.

Compliance Impact

This vulnerability could lead to information disclosure and data tampering, which may violate GDPR's data protection requirements and HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies

Update the NVIDIA vGPU Virtual GPU Manager to the latest patched version as soon as possible to address the out-of-bounds write vulnerability in the kernel mode layer.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47495. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart