NVIDIA GPU Display Driver for Windows has a DLL search order bypass in the CUDA driver. The flaw permits an attacker to load an arbitrary library from an uncontrolled search path. This can give the attacker code execution, privilege escalation, information disclosure, data tampering, and denial of service. The weakness is categorized as CWE-427.

Affected are NVIDIA GPU Display Drivers for Windows associated with GeForce, Guest driver, RTX, Quadro, NVS, and Tesla products. The impact applies to any installed driver that includes the vulnerable CUDA component. Specific version information is not provided in the CVE data.

The CVSS base score is 7.8, indicating a high severity. The EPSS score is not available, so the current exploitation probability is unknown. It is not listed in the CISA KEV catalog. An attacker who can influence the driver loading process or supply a malicious DLL in a path that the driver scans can potentially abuse this flaw. The attack likely requires local or privileged access to the Windows machine, but could be leveraged remotely if the attacker can manipulate driver installation or obtain user credentials.