Loading story…
NVIDIA disclosed CVE-2026-47483, a vulnerability in DCGM and DCGM Exporter that allows unauthenticated attackers to abuse exposed /debug/pprof diagnostic endpoints and trigger uncontrolled resource consumption. By sending many concurrent profiling requests, an attacker can exhaust CPU, memory, and file descriptors, causing the exporter to become unresponsive or crash. The issue affects all platforms within the impacted version ranges and carries a CVSS v3.1 score reflecting high availability impact with possible limited information disclosure.
Security advisories warn that exploitation can disrupt GPU monitoring, telemetry, and alerting, and prolonged abuse may also destabilize the host system. The exposed profiling interface may leak limited diagnostic data, including internal stack traces. Public guidance says there is no known exploitation so far, but the flaw is considered automatable; defenders are urged to deploy NVIDIA’s patched version and reduce exposure of the diagnostic endpoints through firewalling, authentication, rate limiting, and network isolation.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
A vulnerability identified as CVE-2026-47483 was disclosed affecting NVIDIA DCGM and DCGM Exporter. The flaw in the /debug/pprof endpoints allows concurrent unauthenticated profiling requests to trigger uncontrolled resource consumption, potentially causing denial of service and limited information disclosure.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
cert.ug
Open sourcecvefeed.io
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
NVIDIA disclosed **CVE-2026-24254**, a critical out-of-bounds write vulnerability in **NVIDIA Dynamo for Linux** affecting the **multimodal serving topology**. The flaw impacts versions `0` through `v1.1.0` and carries a **CVSS v3.1 score of 9.8** (`AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`), indicating that it can be exploited remotely without privileges or user interaction. Successful exploitation could lead to **remote code execution**, **privilege escalation**, **data tampering**, **denial of service**, and **information disclosure**. NVIDIA published the issue as part of **Security Bulletin 5842**, which includes bulletin artifacts and references multiple Dynamo-related CVEs; available metadata indicates **no known exploitation** so far, while CISA SSVC data flags the bug as **automatable** with **total technical impact**.
Aug 5, 2026
NVIDIA has disclosed a high-severity vulnerability in its Display Driver, identified as CVE-2025-23309, which involves an uncontrolled DLL loading path. This flaw could allow attackers to cause arbitrary denial of service, escalate privileges, execute code, or tamper with data on affected systems. The vulnerability is not remotely exploitable, indicating that an attacker would require local access to exploit the issue. According to the official CVE entry, the vulnerability was published on October 10, 2025, and is being tracked by NVIDIA’s Product Security Incident Response Team (PSIRT). While the specific affected product versions are not listed in the CVE feed, the issue is confirmed to impact NVIDIA Display Driver software. In parallel, security reports highlight that NVIDIA has released patches addressing multiple high-severity vulnerabilities in its GPU drivers, some of which risk remote code execution (RCE) and privilege escalation. These patches are part of NVIDIA’s ongoing efforts to mitigate risks associated with their graphics drivers, which are widely used in both consumer and enterprise environments. The vulnerabilities addressed in the latest update could potentially be leveraged by attackers to gain unauthorized access or control over systems running vulnerable driver versions. Organizations using NVIDIA GPU drivers are strongly advised to review the latest security advisories and apply the recommended patches to reduce exposure. The disclosure underscores the importance of maintaining up-to-date drivers, as vulnerabilities in such low-level system components can have significant security implications. Security teams should also monitor for any signs of exploitation attempts targeting these flaws, especially in environments where local access by untrusted users is possible. The high CVSS score of 8.2 for CVE-2025-23309 reflects the potential impact of successful exploitation. NVIDIA’s prompt response and patch release demonstrate the company’s commitment to addressing security issues in its products. Enterprises should ensure that their asset inventories accurately reflect the presence of NVIDIA drivers and prioritize patching accordingly. The incident also highlights the broader trend of attackers targeting device drivers as a means to bypass operating system security controls. Given the critical role of GPU drivers in system performance and security, timely remediation is essential to prevent potential compromise. Security advisories from both NVIDIA and independent security researchers provide detailed guidance on mitigation steps. Regular vulnerability management processes should incorporate driver updates as a key component of endpoint security. Finally, organizations should consider implementing additional controls, such as application whitelisting and user privilege restrictions, to further reduce the risk of exploitation.
Jun 29, 2026
NVIDIA DGX Spark GB10 systems are affected by two critical vulnerabilities, CVE-2025-33187 and CVE-2025-33188, which could allow attackers to escalate privileges and manipulate hardware controls. CVE-2025-33187 is a critical flaw in the SROOT component, enabling attackers with privileged access to gain entry to SoC protected areas, potentially resulting in code execution, information disclosure, data tampering, denial of service, or further privilege escalation. CVE-2025-33188 involves hardware resource manipulation, where successful exploitation could lead to information disclosure, data tampering, or denial of service. Both vulnerabilities are not remotely exploitable but pose significant risks if local access is obtained. NVIDIA has released critical patches to address these vulnerabilities, with CVE-2025-33187 carrying a CVSS score of 9.3 and CVE-2025-33188 rated at 8.0. Organizations using NVIDIA DGX Spark hardware are urged to apply the updates immediately to mitigate the risk of exploitation. The vulnerabilities highlight the importance of securing AI infrastructure, as exploitation could expose sensitive AI secrets and compromise system integrity. No affected product versions have been explicitly listed, but the advisories emphasize the urgency of remediation for all DGX Spark GB10 deployments.
Jun 29, 2026