The NVIDIA GPU Display Driver for Windows includes a flaw in its kernel module that allows an attacker to bypass required authorization checks. This missing authorization flaw (CWE-862) can enable the attacker to read sensitive data resident in the driver or system memory and to modify driver state, leading to information disclosure and data tampering.

Affected systems are NVIDIA graphics cards across the GeForce, RTX, Quadro, NVS, and Tesla families when running the Windows GPU display driver. No specific driver version information is provided by the advisory, so the vulnerability may apply to multiple driver releases unless mitigated by a patch.

The CVSS score of 7.3 reflects a high severity impact, while the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the exploit requires local or elevated privileges, and that the missing authorization check directly increases the risk of confidentiality and integrity compromise. Without a patch, an attacker with sufficient privileges could potentially access or alter protected data.