Impact
Kernel‑mode escape handling in the NVIDIA GPU Display Driver for Windows contains an authorization check that can be bypassed by an attacker with local access. A successful exploit would allow the attacker to elevate privileges, read protected data, modify system state, or execute arbitrary code, potentially causing data tampering, denial of service, or further compromise.
Affected Systems
The vulnerability affects the NVIDIA GPU Display Driver for Windows across all NVIDIA graphics products including GeForce, RTX, Quadro, NVS, Tesla, Virtual GPU Manager, and the Guest driver. No specific version information is provided in the CVE record.
Risk and Exploitability
The CVSS score of 7.8 indicates a high severity with a local attacker able to exploit the flaw. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack requires local access to the machine; once achieved, the kernel‑mode escape can lead to privilege escalation or arbitrary code execution. The lack of a publicly disclosed exploit and the absence of KEV listing reduce the immediate risk of widespread exploitation, but the high impact justifies prompt patching.
OpenCVE Enrichment