CVE-2026-47579

A flaw was found in the NVIDIA GPU Display Driver. A local user can trigger a use-after-free condition in the kernel mode driver, where the system accesses memory after it has already been released. Successful exploitation could lead to arbitrary code execution, privilege escalation, unauthorized...

CVE-2026-47565

A flaw was found in the NVIDIA GPU display driver. A privileged local user could trigger a race condition in the kernel mode layer, resulting in an out-of-bounds memory write. A successful exploit may allow the attacker to execute arbitrary code, escalate privileges, cause a denial of service DoS...

CVE-2026-47533

A flaw was found in nvidia-driver. A local attacker with administrative privileges can trigger an array indexing error within the kernel-mode driver layer. Successful exploitation could allow the attacker to execute arbitrary code, escalate system privileges, access sensitive data, or cause a...

CVE-2026-47525

A flaw was found in nvidia-driver. The kernel mode layer improperly validates array indices during driver operations. A local attacker can exploit this vulnerability to achieve arbitrary code execution, escalate privileges, cause a Denial of Service DoS, or tamper with system data...

CVE-2026-47518

A flaw was found in the NVIDIA GPU Display Driver. An incorrect permission assignment for a critical resource in a secure microcontroller component allows an attacker with privileged local access to modify restricted protected memory. This vulnerability may allow an attacker to achieve arbitrary...

CVE-2026-47509

A flaw was found in the NVIDIA GPU display driver. A local user with elevated privileges can trigger an out-of-bounds write writing data past intended memory buffer limits within the kernel mode layer. A successful exploit could allow the attacker to achieve arbitrary code execution, escalate...

CVE-2026-102677

A flaw was found in Electron. The cache mechanism for sandboxed preload scripts fails to verify that cached entries match the requested script. In applications that load untrusted web content, an attacker with a compromised renderer process can write malicious data into the cache to be reused on...

CVE-2026-47601

A flaw was found in the NVIDIA GPU display driver open-source kernel module. An unprivileged local user can trigger this vulnerability when importing a read-only buffer from another device via the Direct Memory Access Buffer DMA-BUF sharing framework, leading to improper preservation of memory...

CVE-2026-47595

A flaw was found in the NVIDIA GPU Display Driver. The driver's kernel mode layer fails to properly preserve memory permissions, allowing an unprivileged local user to write data to read-only memory. A local attacker could exploit this vulnerability to execute arbitrary code, escalate privileges,...

CVE-2026-47600

A flaw was found in the NVIDIA GPU Display Driver. The driver's kernel mode layer improperly handles resources during error processing by operating on uninitialized data. A local user with low privileges could exploit this flaw to achieve arbitrary code execution, escalate privileges, access...

CVE-2026-47596

A flaw was found in the NVIDIA GPU Display Driver for Linux. In the kernel mode layer, memory permissions are not properly preserved, allowing an unprivileged local user to write to read-only memory. This issue can lead to arbitrary code execution and privilege escalation on the affected system...

CVE-2026-47594

A flaw was found in the NVIDIA GPU display driver. A local unprivileged user can trigger a use-after-free condition—where memory is accessed after it has been released—by submitting a specific sequence of driver commands. Successful exploitation could allow an attacker to execute arbitrary code,...

CVE-2026-47591

A flaw was found in the NVIDIA GPU display driver. An incorrect authorization issue in the kernel mode layer allows a local unprivileged user to bypass read-only memory protections and obtain write access to restricted memory. A local attacker could exploit this flaw to escalate privileges, execu...

CVE-2026-47572

A flaw was found in the NVIDIA GPU Display Driver for Linux. A local user can trigger a type confusion condition—where the driver misinterprets the structure of an object in memory—within the kernel-mode layer. Successful exploitation could allow an attacker to escalate privileges, execute...

CVE-2026-47558

A flaw was found in the NVIDIA GPU display driver. An unprivileged local user can exploit this vulnerability by triggering a double-free memory management error—releasing the same memory block twice—within the kernel-mode layer while handling imported memory states. A successful exploit could all...

CVE-2026-47550

A flaw was found in the NVIDIA GPU display driver. The kernel mode layer fails to properly validate user-supplied memory pointers before dereferencing them. A local attacker with low privileges can exploit this issue by submitting a crafted pointer, potentially leading to arbitrary code execution...

CVE-2026-47540

A flaw was found in the NVIDIA GPU Display Driver. An integer underflow vulnerability exists in the driver's kernel mode layer, occurring when an arithmetic calculation results in a value smaller than the minimum representable limit. A local attacker with low-level privileges can exploit this fla...

CVE-2026-47530

A flaw was found in nvidia-driver. A local user with standard privileges can trigger an out-of-bounds memory write within the driver's kernel-mode layer. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, tamper with sensitive data, or cause a denial o...

CVE-2026-47496

A flaw was found in the NVIDIA Virtual GPU vGPU Manager within the NVIDIA GPU Display Driver. A user within a guest virtual machine VM can exploit this vulnerability by sending a specially crafted Remote Procedure Call RPC request to the host system, causing an out-of-bounds memory write. A...

LocalStranger

LocalStranger LocalStranger es un proyecto de Prueba de Concepto diseñado para demostrar lo peligroso que es realmente un controlador en modo kernel vulnerable. WinNotify.sys como yo lo llamo, msft.sys, es un controlador vulnerable muy peligroso que expone primitivas de kernel arbitrarias debido ...