Description
NVIDIA NVAPI for Windows contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Published: 2026-09-30
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

NVIDIA NVAPI for Windows contains an out‑of‑bounds write flaw that can be triggered by an attacker. If leveraged successfully, the vulnerability can lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected Systems

The vulnerability affects a broad range of NVIDIA GPU and driver products, including GeForce, RTX, Quadro, NVS, and Tesla series, as well as the NVIDIA Guest driver. Specific version details are not disclosed in the current advisories, so any system running these components is potentially vulnerable.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity issue. No EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalog. The attack vector is not specified in the description, so it is inferred that local privilege or privileged user access may be required to trigger the out‑of‑bounds write, but remote exploitation cannot be ruled out without further detail.

Generated by OpenCVE AI on September 30, 2026 at 18:11 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest NVIDIA driver or patch that addresses the NVAPI vulnerability
  • Verify that the installed driver version has the fix applied by checking the NVIDIA release notes or the official product security page
  • If disabling NVAPI is feasible, remove or restrict its usage within the affected applications or systems

Generated by OpenCVE AI on September 30, 2026 at 18:11 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Vendors & Products Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write in NVIDIA NVAPI Leading to Potential Code Execution
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA NVAPI for Windows contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Nvidia Geforce Guest Driver Nvs Quadro Rtx Tesla
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-02T03:55:18.426Z

Reserved: 2026-05-19T19:55:47.437Z

Link: CVE-2026-47573

cve-icon Vulnrichment

Updated: 2026-09-30T17:56:34.979Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:26.437

Modified: 2026-10-02T04:18:07.713

Link: CVE-2026-47573

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T14:15:09Z

Weaknesses