Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an incorrect comparison. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Published: 2026-09-30
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

NVIDIA GPU Display Driver for Windows contains a kernel module flaw where an incorrect comparison can be triggered by an attacker. This flaw allows the attacker to execute arbitrary code, crash the driver, elevate privileges, disclose information, and tamper with data. The vulnerability falls under CWE-190, an integer overflow, indicating that the comparison fails to validate input or boundary conditions correctly.

Affected Systems

The affected products are NVIDIA GeForce, RTX, Quadro, NVS, and Tesla graphics drivers for Windows. Specific version ranges are not listed in the available data, so any installed version of these drivers may be vulnerable until a patch is released.

Risk and Exploitability

The CVSS score of 7.8 identifies it as high severity. EPSS is not provided, so the likelihood of exploitation is unknown. The vulnerability is not in NVIDIA's KEV catalog. The probable attack vector is local, requiring the attacker to run privileged code that can load or interact with the kernel module. Once a local attacker triggers the incorrect comparison, the consequences include code execution and privilege escalation to system level.

Generated by OpenCVE AI on September 30, 2026 at 18:09 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest NVIDIA GPU Display Driver update as soon as it becomes available.
  • Restrict user rights to prevent the loading of kernel modules and limit the execution of untrusted code on the system.
  • Enable system monitoring and log analysis to detect any abnormal driver behavior or unexpected loads.

Generated by OpenCVE AI on September 30, 2026 at 18:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 30 Sep 2026 22:45:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Vendors & Products Nvidia
Nvidia geforce
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Title Incorrect Comparison in NVIDIA GPU Display Driver Kernel Module
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an incorrect comparison. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Weaknesses CWE-190
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-01T03:56:27.817Z

Reserved: 2026-05-19T19:55:47.437Z

Link: CVE-2026-47577

cve-icon Vulnrichment

Updated: 2026-09-30T17:56:31.212Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:26.990

Modified: 2026-10-01T04:18:17.233

Link: CVE-2026-47577

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T22:30:07Z

Weaknesses
  • CWE-190

    Integer Overflow or Wraparound