Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 07:05 UTC

Critical in the last 24 hours

1602 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

164-72% vs 7-day avg of 596

3 critical, 57 high, 70 medium, 29 low

138 advisories match Clear all Export 25 shown as CSV

Expand	Severity	Score	Advisory	Title	Source	Published
	High	7.0	CVE-2026-98895	In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Handle destroying table that has a miss table If a table has a miss table that was created... Linux, NVIDIALinux, Linux kernel, NVIDIA mlx5	NVD	Oct 23 12:18 UTC
CVE-2026-98895In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Handle destroying table that has a miss table If a table has a miss table that was created... Executive summary The advisory describes a fix in the Linux kernel's mlx5 HWS table-destruction code, which handles tables that have a miss table. The advisory does not state how severe the flaw is or whether it can be exploited. It shows only a stable-tree kernel patch, and it does not give any vendor recommendation beyond applying that patch. Technical summary The flaw is described as leaving a stale list node in a miss_tbl list when a table with a default miss table is deleted, which the advisory says results in garbage in that list. The fix adds a list_del_init call for the default miss entry in mlx5hws_table_destroy when tbl->default_miss.miss_tbl is set. The advisory does not state the vulnerability class, attack vector, or preconditions for exploitation. It does not state a CVSS score, affected or fixed version ranges, workarounds, or detection guidance. The advisory does not say whether the issue has been exploited in the wild. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from git.kernel.org/stable/c/16b81428f7b5f25…a998bc4f4ecd1c8823f8 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Linux NVIDIA Linux Linux kernel NVIDIA mlx5 NIST National Vulnerability DatabasePublished Oct 23, 2026 12:18 UTC Read the advisory
	Unknown	n/a	CVE-2026-98875	In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2... Linux, NVIDIALinux, Linux kernel	NVD	Oct 23 12:18 UTC
CVE-2026-98875In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2... Executive summary The advisory describes a fix to the Linux kernel's Nouveau graphics driver for NVIDIA GA100 chips, where a missing SEC2 table entry caused a NULL pointer dereference that crashed GSP-RM boot. The advisory does not describe a security impact, severity rating, or exploitation, and it does not state a CVSS score. The fix is a one-line change to the chip table, and no workaround is described beyond applying the change. Technical summary The flaw is a NULL pointer dereference in the Linux kernel nouveau DRM driver. During tu102_gsp_oneinit(), the booter constructor accesses device->sec2, which is NULL because the GA100 chip table lacks a .sec2 entry, and this crashes GSP-RM boot. The fix adds .sec2 = { 0x00000001, tu102_sec2_new } to the nv170 chip table in drivers/gpu/drm/nouveau/nvkm/engine/device/base.c. The advisory does not state an attack vector, attacker preconditions, or whether the crash can be triggered by an unprivileged user. Affected and fixed kernel version numbers are not stated, and no workaround or detection guidance is stated beyond the code change. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from git.kernel.org/stable/c/604d0efb17cc0dd…89134736ac2698d5fca7 Score No CVSS score published. Affects Linux NVIDIA Linux Linux kernel NIST National Vulnerability DatabasePublished Oct 23, 2026 12:18 UTC Read the advisory
	Medium	4.4	CVE-2026-67456	NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow NVIDIANVIDIA Warp	NVD	Oct 13 13:17 UTC
CVE-2026-67456NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow From the advisory NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service. Impact if exploited ConfidentialityNone IntegrityLow AvailabilityLow How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L Affects NVIDIA NVIDIA Warp NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	7.8	CVE-2026-65180	NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file NVIDIANVIDIA Megatron-LM	NVD	Oct 13 13:17 UTC
CVE-2026-65180NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file From the advisory NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects NVIDIA NVIDIA Megatron-LM NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	Critical	9.1	CVE-2026-65173	NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted... NVIDIANVIDIA AIStore framework	NVD	Oct 13 13:17 UTC
CVE-2026-65173NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted... From the advisory NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service. Impact if exploited ConfidentialityNone IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H Affects NVIDIA NVIDIA AIStore framework NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	8.6	CVE-2026-65172	NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL... NVIDIANVIDIA AIStore framework	NVD	Oct 13 13:17 UTC
CVE-2026-65172NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL... From the advisory NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy. A successful exploit may lead to information disclosure and unauthorized start or stop operations that affect the integrity and availability of ETL data-processing pipelines. Impact if exploited ConfidentialityHigh IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L Affects NVIDIA NVIDIA AIStore framework NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	8.6	CVE-2026-65170	NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a... NVIDIANVIDIA AIStore framework	NVD	Oct 13 13:17 UTC
CVE-2026-65170NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a... From the advisory NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Affects NVIDIA NVIDIA AIStore framework NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	8.1	CVE-2026-65164	NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a... NVIDIANVIDIA AIStore framework	NVD	Oct 13 13:17 UTC
CVE-2026-65164NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a... From the advisory NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to arbitrary file creation or overwrite, code execution, information disclosure, data tampering, and denial of service. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects NVIDIA NVIDIA AIStore framework NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	Critical	10.0	CVE-2026-65162	NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and... NVIDIANVIDIA AIStore framework	NVD	Oct 13 13:17 UTC
CVE-2026-65162NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and... From the advisory NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affects NVIDIA NVIDIA AIStore framework NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	7.5	CVE-2026-65161	NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a... NVIDIANVIDIA AIStore framework	NVD	Oct 13 13:17 UTC
CVE-2026-65161NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a... From the advisory NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source path. A successful exploit may lead to information disclosure. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affects NVIDIA NVIDIA AIStore framework NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	7.3	CVE-2026-65150	NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read NVIDIANVIDIA DALI	NVD	Oct 13 13:17 UTC
CVE-2026-65150NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read From the advisory NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering, and denial of service. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affects NVIDIA NVIDIA DALI NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	7.3	CVE-2026-65149	NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write NVIDIANVIDIA DALI	NVD	Oct 13 13:17 UTC
CVE-2026-65149NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write From the advisory NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affects NVIDIA NVIDIA DALI NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	7.3	CVE-2026-65148	NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow NVIDIANVIDIA DALI	NVD	Oct 13 13:17 UTC
CVE-2026-65148NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow From the advisory NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affects NVIDIA NVIDIA DALI NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	7.3	CVE-2026-65147	NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read NVIDIANVIDIA DALI	NVD	Oct 13 13:17 UTC
CVE-2026-65147NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read From the advisory NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affects NVIDIA NVIDIA DALI NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	7.8	CVE-2026-65141	NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection NVIDIANVIDIA Isaac Lab	NVD	Oct 13 13:17 UTC
CVE-2026-65141NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection From the advisory NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affects NVIDIA NVIDIA Isaac Lab NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	Medium	6.0	CVE-2026-65131	NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain... NVIDIANVIDIA NVSentinel	NVD	Oct 13 13:17 UTC
CVE-2026-65131NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain... From the advisory NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required High User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H Affects NVIDIA NVIDIA NVSentinel NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	7.8	CVE-2026-65110	NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file NVIDIANVIDIA Megatron-LM	NVD	Oct 13 13:17 UTC
CVE-2026-65110NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file From the advisory NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects NVIDIA NVIDIA Megatron-LM NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	7.1	CVE-2026-65104	NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests NVIDIANVIDIA Megatron-LM	NVD	Oct 13 13:17 UTC
CVE-2026-65104NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests From the advisory NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure. Impact if exploited ConfidentialityLow IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N Affects NVIDIA NVIDIA Megatron-LM NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	8.1	CVE-2026-65103	NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper... NVIDIANVIDIA AIStore framework	NVD	Oct 13 13:17 UTC
CVE-2026-65103NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper... From the advisory NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects NVIDIA NVIDIA AIStore framework NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	8.6	CVE-2026-65101	NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external... NVIDIANVIDIA AIStore framework	NVD	Oct 13 13:17 UTC
CVE-2026-65101NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external... From the advisory NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Affects NVIDIA NVIDIA AIStore framework NIST National Vulnerability DatabasePublished Oct 13, 2026 13:17 UTC Read the advisory
	High	7.8	CVE-2026-65142	NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data NVIDIANVIDIA Model-Optimizer	NVD	Oct 6 22:17 UTC
CVE-2026-65142NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data From the advisory NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affects NVIDIA NVIDIA Model-Optimizer NIST National Vulnerability DatabasePublished Oct 6, 2026 22:17 UTC Read the advisory
	Medium	5.5	CVE-2026-65122	NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read NVIDIANVIDIA TensorRT	NVD	Oct 6 22:17 UTC
CVE-2026-65122NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read From the advisory NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may lead to denial of service. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affects NVIDIA NVIDIA TensorRT NIST National Vulnerability DatabasePublished Oct 6, 2026 22:17 UTC Read the advisory
	Medium	5.5	CVE-2026-47604	NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to... NVIDIANVIDIA GeForce, NVIDIA RTX, Quadro, NVS, NVIDIA Tesla, NVIDIA Guest driver, NVIDIA Virtual GPU Manager	NVD	Sep 30 16:17 UTC
CVE-2026-47604NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to... From the advisory NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affects NVIDIA NVIDIA GeForce NVIDIA RTX, Quadro, NVS NVIDIA Tesla NVIDIA Guest driver NVIDIA Virtual GPU Manager NIST National Vulnerability DatabasePublished Sep 30, 2026 16:17 UTC Read the advisory
	Medium	5.5	CVE-2026-47603	NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to... NVIDIANVIDIA GeForce, NVIDIA RTX, Quadro, NVS, NVIDIA Tesla, NVIDIA Guest driver, NVIDIA Virtual GPU Manager	NVD	Sep 30 16:17 UTC
CVE-2026-47603NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to... From the advisory NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affects NVIDIA NVIDIA GeForce NVIDIA RTX, Quadro, NVS NVIDIA Tesla NVIDIA Guest driver NVIDIA Virtual GPU Manager NIST National Vulnerability DatabasePublished Sep 30, 2026 16:17 UTC Read the advisory
	High	7.1	CVE-2026-47602	NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer NVIDIANVIDIA GeForce, NVIDIA RTX, Quadro, NVS, NVIDIA Tesla, NVIDIA Virtual GPU Manager	NVD	Sep 30 16:17 UTC
CVE-2026-47602NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer From the advisory NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful exploit of this vulnerability might lead to denial of service and information disclosure. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affects NVIDIA NVIDIA GeForce NVIDIA RTX, Quadro, NVS NVIDIA Tesla NVIDIA Virtual GPU Manager NIST National Vulnerability DatabasePublished Sep 30, 2026 16:17 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Score

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited