{"id":"CVE-2026-47502","published":"2026-09-30T16:17:15.110","lastModified":"2026-10-01T04:18:08.633","description":"NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer, where a guest user could cause an integer overflow leading to memory corruption. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-190"],"vendors":[],"products":[],"references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47502","tags":[]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47502","tags":[]}],"exploitRefs":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw is an integer overflow in the NVIDIA vGPU kernel mode layer, which could allow a guest user to cause memory corruption, potentially leading to code execution, data tampering, and privilege escalation. This vulnerability is significant because it can be exploited by attackers with guest user privileges, posing a serious risk to system security.","exploitability":"Exploitation requires guest user privileges and the ability to trigger the integer overflow, making it moderately difficult. Precondition is the presence of the affected NVIDIA vGPU software on the system.","blast_radius":"If exploited, this vulnerability could lead to code execution, denial of service, and data tampering, impacting the security and integrity of the system.","remediation":"Upgrade to the fixed version 21.20.2002 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","memory-corruption"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:42:44.644Z"}}