Privilege Escalation Vulnerability in NVIDIA vGPU Software for Windows and Linux
CVE-2026-47493
What is CVE-2026-47493?
A vulnerability in NVIDIA vGPU software for both Windows and Linux platforms allows a guest to gain unauthorized access to privileged host GPU resources. An attacker exploiting this flaw could lead to various negative outcomes, including unauthorized code execution, escalation of privileges beyond intended boundaries, potential tampering with data, denial of service incidents, and possible information disclosure. It is essential for users and administrators to be aware of this issue and take appropriate measures to mitigate risks.
Affected Version(s)
Virtual GPU Manager Azure Local, Windows Server(vGPU 19) 582.51(All versions prior to and including vGPU 19.5)
Virtual GPU Manager Azure Local, Windows Server(vGPU 20) 596.38(All versions prior to and including vGPU 20.1)
Virtual GPU Manager XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19) 580.159.01(All versions prior to and including vGPU 19.5)