CVE-2026-47518
published 2026-09-30CVE-2026-47518: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a…
PriorityP429medium6CVSS 3.1
AVLACHPRHUINSUCHIHAL
EPSS
0.12%
1.8th percentile
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a critical resource allows an attacker with privileged local access to modify protected memory that should be restricted. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
CVSS provenance
nvdv3.16.0MEDIUMCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L
vendor_redhat6.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Code execution via improper permission assignment in secure microcontroller
vendor_redhat·2026-09-30·CVSS 6.0
CVE-2026-47518 [MEDIUM] CWE-266 nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Code execution via improper permission assignment in secure microcontroller
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Code execution via improper permission assignment in secure microcontroller
A flaw was found in the NVIDIA GPU Display Driver. An incorrect permission assignment for a critical resource in a secure microcontroller component allows an attacker with privileged local access to modify restricted protected memory. This vulnerability may allow an attacker to achieve arbitrary code execution and further privilege escalation on the host system.
Package: nvidia-driver (Red Hat Enterprise Linux 10) - Fix deferred
Package: nvidia-driver (Red Hat Enterprise Linux 9) - Fix deferred
GHSA
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a critical resource allows an attacker with pr
ghsa_unreviewed·2026-09-30
CVE-2026-47518 [MEDIUM] CWE-732 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a critical resource allows an attacker with pr
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a critical resource allows an attacker with privileged local access to modify protected memory that should be restricted. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.
No detection rules found.
No public exploits indexed.
2026-09-30
Published