7.8

CVE-2026-47574

Medienbericht
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability where an attacker could cause incorrect resource transfer between spheres. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerNVIDIA
≫
Produkt Virtual GPU Manager
Default Statusunaffected
Version 595.71.03(All versions prior to and including vGPU 20.1)
Status affected
HerstellerNVIDIA
≫
Produkt Virtual GPU Manager
Default Statusunaffected
Version 580.159.01(All versions prior to and including vGPU 19.5)
Status affected
HerstellerNVIDIA
≫
Produkt Virtual GPU Manager
Default Statusunaffected
Version 596.38(All versions prior to and including vGPU 20.1)
Status affected
HerstellerNVIDIA
≫
Produkt Virtual GPU Manager
Default Statusunaffected
Version 582.51(All versions prior to and including vGPU 19.5)
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.02
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Nvidia 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-669 Incorrect Resource Transfer Between Spheres

The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
01.10.2026 11:11
https://github.com/NVIDIA/product-security/tree/main/2026/5861
https://nvd.nist.gov/vuln/detail/CVE-2026-47574
https://www.cve.org/CVERecord?id=CVE-2026-47574