The Open GPU Vulnerability Database
An open project to list all known vulnerabilities in the stack GPU datacenters run on.
5,796 entries762 critical165 known exploited
criticalhighmediumlowSelect a layer to filter
Showing 60 of 5,796 entries · 762 critical · 165 known exploited
Mooncake transfer engine: zero-length handshake frame crashes the hosting inference processhighCVE-2026-104433AI/ML frameworks & servingOct 3, 2026Oct 3, 2026GitLab AI Gateway: crafted Duo flow config escapes the prompt template sandbox into command executioncriticalCVE-2026-90970AI/ML frameworks & servingOct 2, 2026Oct 2, 2026Nx @nx/docker: config-controlled shell injection in release commands executes code in the release jobhighCVE-2026-104859Control plane, storage & DevOpsOct 2, 2026Oct 2, 2026GNU GRUB 2 (serial command MMIO base address validation): GRUB's `serial` command accepts an MMIO base address withoutmediumCVE-2026-97876Firmware, BMC & network fabricOct 2, 2026Oct 2, 2026Trivy: Terraform filesystem functions read paths above the scan root during misconfig scanslowCVE-2026-104994Control plane, storage & DevOpsOct 2, 2026Oct 2, 2026Fortra BoKS Manager: command injection in crlserver gives root on the BoKS Master via a crafted CRL URLcriticalCVE-2026-79898Control plane, storage & DevOpsOct 1, 2026Oct 1, 2026Foreman: command injection in the errors:fetch_log rake task escalates a scoped sudo grant to full code executionhighCVE-2026-12540Control plane, storage & DevOpsOct 1, 2026Oct 1, 2026Foreman / Red Hat Satellite: shell injection via foreman-rake db:dump and db:import_dump pathshighCVE-2026-12541Control plane, storage & DevOpsOct 1, 2026Oct 1, 2026Confluent Kafka Python client: TLS certificate verification disabled by default toward HashiCorp Vault KMShighCVE-2026-15911Control plane, storage & DevOpsOct 1, 2026Oct 1, 2026Pandora FMS: blind SQL injection through the module parameter of the Grafana datasource endpointhighCVE-2026-75786Control plane, storage & DevOpsOct 1, 2026Oct 1, 2026Fortra BoKS Manager: oversized digest name in a KSL start message overflows a fixed 16-byte checksum fieldmediumCVE-2026-79900Control plane, storage & DevOpsOct 1, 2026Oct 1, 2026ansible-runner: streamed archive extraction follows symlinks and writes outside the target directorymediumCVE-2026-103754Control plane, storage & DevOpsOct 1, 2026Oct 1, 2026OpenRun: redirect URL restrictions can be bypassed, giving an open redirect on the deploy consolemediumCVE-2026-55252Container, Kubernetes & orchestrationOct 1, 2026Oct 1, 2026Langchain-Chatchat: arbitrary file write outside the upload and knowledge-base directoriesunscoredCVE-2026-51882+2AI/ML frameworks & servingOct 1, 2026Oct 1, 2026Cisco Catalyst SD-WAN Manager: URI-encoding auth bypass gives unauthenticated admin API accesscriticalCVE-2026-76504Firmware, BMC & network fabricKnown exploitedSep 30, 2026Sep 30, 2026Apache MINA SSHD: a server requiring two public keys accepts the same key twice, a partial auth bypasshighCVE-2026-93994Kernel, userspace & hypervisorSep 30, 2026Sep 30, 2026NVIDIA Linux GPU driver: read-only memory permissions are not preserved, allowing unprivileged writeshighCVE-2026-47489+1NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Linux GPU driver: mapping stays usable after the backing memory is freed and reusedhighCVE-2026-47491NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA vGPU: a guest can reach privileged host GPU resources it is not authorized forhighCVE-2026-47493NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Linux GPU driver: user-supplied data reaches a format stringhighCVE-2026-47494NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA vGPU Manager: guest-triggered out-of-bounds write in the host kernel mode layerhighCVE-2026-47495NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA vGPU Manager: crafted data in the GSP tracing shared buffer causes improper accesshighCVE-2026-47497NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA vGPU Manager: crafted guest RPC message causes an out-of-bounds write in the GSP pluginhighCVE-2026-47498NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA vGPU Manager: guest-triggered out-of-bounds read in the host kernel mode layerhighCVE-2026-47499NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA GPU driver: use-after-free reachable by an unprivileged user through ordinary driver callshighCVE-2026-47500+5NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Linux GPU driver: mismatched buffers during event buffer setup cause a kernel out-of-bounds writehighCVE-2026-47501NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA vGPU Manager: guest-triggered integer overflow leads to memory corruptionhighCVE-2026-47502NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA vGPU plugin: guest RPC with an invalid performance state list size causes an out-of-bounds writehighCVE-2026-47503NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Linux driver NGX updater: outdated embedded crypto library is vulnerable to type confusionhighCVE-2026-47504NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Windows GPU driver: use-after-free in the kernel mode layerhighCVE-2026-47505NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA GPU driver: out-of-bounds array access in the kernel mode layerhighCVE-2026-47507NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA GPU driver: incorrect conversion between numeric types in the kernel mode layerhighCVE-2026-47508NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA GPU driver: integer overflow in size arithmetic leads to an out-of-bounds writehighCVE-2026-47510+1NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA GPU driver: unprivileged out-of-bounds writes in the kernel mode layerhighCVE-2026-47511+4NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA GPU driver: out-of-bounds reads leak kernel heap and stack contents to an unprivileged userhighCVE-2026-47512+4NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA vGPU Manager on Linux: out-of-bounds reads in the host kernel mode layerhighCVE-2026-47519+3NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA GPU firmware: access of an uninitialized pointer reachable from a local attackerhighCVE-2026-47528NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA vGPU Manager on Linux: out-of-bounds read in GPU firmwarehighCVE-2026-47535NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA GPU driver: integer underflow in the kernel mode layerhighCVE-2026-47540NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA vGPU Manager on Linux: out-of-bounds write in the host kernel mode layerhighCVE-2026-47541NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Windows GPU driver: untrusted user pointer is dereferenced without validationhighCVE-2026-47550NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Linux GPU driver: unprivileged user bypasses an authorization check and changes privileged settingshighCVE-2026-47552NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Linux GPU driver: double-free of imported memory state in the kernel modulehighCVE-2026-47558NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA GPU driver: a user can access memory belonging to another user's processhighCVE-2026-47559NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Linux GPU driver: unprivileged user triggers use-after-free in the kernel modulehighCVE-2026-47560+2NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Linux GPU driver: ioctl input buffer size is unvalidated, giving a kernel out-of-bounds writehighCVE-2026-47561NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Linux GPU driver: user-triggerable NULL pointer dereference in the kernel modulehighCVE-2026-47563NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Linux GPU driver: handle recycle race causes type confusion in the kernel modulehighCVE-2026-47569NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA CUDA driver on Windows: library loaded from an uncontrolled search pathhighCVE-2026-47570NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Windows GPU driver: escape handler authorization check based on client context can be bypassedhighCVE-2026-47571NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Linux GPU driver: type confusion in the kernel mode layerhighCVE-2026-47572NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA NVAPI on Windows: out-of-bounds write reachable by a local attackerhighCVE-2026-47573NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA vGPU Manager on Linux: incorrect resource transfer across isolation boundarieshighCVE-2026-47574NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Windows GPU driver: integer overflow in the DIAG escape handler causes an out-of-bounds writehighCVE-2026-47575NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Windows GPU driver: incorrect comparison in the kernel modulehighCVE-2026-47577NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Windows GPU driver: incorrect buffer size calculation in the kernel mode layerhighCVE-2026-47578NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Windows GPU driver: use-after-free with a scope-changing impact beyond the vulnerable componenthighCVE-2026-47579NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Windows GPU driver: type confusion in the kernel modulehighCVE-2026-47583NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Windows GPU driver: integer underflow in the kernel modulehighCVE-2026-47585NVIDIA / GPU stackSep 30, 2026Sep 30, 2026NVIDIA Linux GPU driver: incorrect authorization lets an unprivileged user write read-only memoryhighCVE-2026-47591NVIDIA / GPU stackSep 30, 2026Sep 30, 2026