Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in kernel-mode escape handling where an attacker with local access could bypass an authorization check that is intended to restrict certain operations based on client execution context. A successful exploit of this vulnerability might lead to escalation of privilege, information disclosure, data tampering, denial of service, or code execution.
Published: 2026-09-30
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Privilege Escalation
Action: Patch Immediately
AI Analysis

Impact

Kernel‑mode escape handling in the NVIDIA GPU Display Driver for Windows contains an authorization check that can be bypassed by an attacker with local access. A successful exploit would allow the attacker to elevate privileges, read protected data, modify system state, or execute arbitrary code, potentially causing data tampering, denial of service, or further compromise.

Affected Systems

The vulnerability affects the NVIDIA GPU Display Driver for Windows across all NVIDIA graphics products including GeForce, RTX, Quadro, NVS, Tesla, Virtual GPU Manager, and the Guest driver. No specific version information is provided in the CVE record.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity with a local attacker able to exploit the flaw. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack requires local access to the machine; once achieved, the kernel‑mode escape can lead to privilege escalation or arbitrary code execution. The lack of a publicly disclosed exploit and the absence of KEV listing reduce the immediate risk of widespread exploitation, but the high impact justifies prompt patching.

Generated by OpenCVE AI on September 30, 2026 at 18:55 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Obtain and install the latest NVIDIA GPU Display Driver update that addresses the flaw.
  • Restrict local user accounts from using the NVIDIA Guest driver and disable unused GPU devices when not in use.
  • Keep the host operating system and all device drivers up to date; monitor NVIDIA security advisories for further mitigation steps.

Generated by OpenCVE AI on September 30, 2026 at 18:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia rtx, Quadro, Nvs
Nvidia tesla
Nvidia virtual Gpu Manager
Vendors & Products Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia rtx, Quadro, Nvs
Nvidia tesla
Nvidia virtual Gpu Manager

Wed, 30 Sep 2026 19:15:00 +0000

Type Values Removed Values Added
Title Vulnerability in NVIDIA GPU Driver Allows Local Privilege Escalation

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Windows contains a vulnerability in kernel-mode escape handling where an attacker with local access could bypass an authorization check that is intended to restrict certain operations based on client execution context. A successful exploit of this vulnerability might lead to escalation of privilege, information disclosure, data tampering, denial of service, or code execution.
Weaknesses CWE-863
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


Subscriptions

Nvidia Geforce Guest Driver Nvs Quadro Rtx Rtx, Quadro, Nvs Tesla Virtual Gpu Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-02T03:55:17.025Z

Reserved: 2026-05-19T19:55:47.437Z

Link: CVE-2026-47571

cve-icon Vulnrichment

Updated: 2026-09-30T17:56:37.752Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:26.123

Modified: 2026-10-02T04:18:07.370

Link: CVE-2026-47571

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T00:00:11Z

Weaknesses