Vulnerability Spotlight: Multiple memory corruption vulnerabilities in NVIDIA GPU driver
Summary: Cisco Talos discovered four memory corruption vulnerabilities in the NVIDIA D3D10 graphics driver that could let an attacker write arbitrary memory on the card, triggered by sending a target a specially crafted executable or shader file. Talos confirmed the issues were exploitable in NVIDIA D3D10 driver 496.76, version 30.0.14.9676, and also demonstrated a guest-to-host escape from a HYPER-V guest using RemoteFX that led to execution of vulnerable code on the HYPER-V host.
Key Takeaway: A driver that most PCs require to function properly is the entry point here, and Talos's HYPER-V test shows the same flaw crossing from a guest VM to the host - so a single crafted shader file can put the hypervisor, not just the workstation, in scope.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026