NVIDIA GPU Display Driver for Windows contains a kernel‑module type confusion flaw that can allow a malicious actor to read, write, or execute arbitrary code in kernel mode. If exploited, the attacker could gain elevated privileges, execute arbitrary code, disrupt device operation, and steal or modify data, consistent with CWE‑843.

The flaw affects any Windows installation that uses NVIDIA GeForce, RTX, Quadro, NVS, or Tesla GPUs that employ the standard NVIDIA GPU Display Driver. The vendor lists all core NVIDIA GPU families but does not specify affected driver versions. Any system running these GPUs with an unpatched driver is potentially vulnerable.

The CVSS score is 7.8, indicating a high severity level. EPSS data is not available, and the vulnerability is not currently listed in CISA KEV. Because the flaw arises in kernel code, the attack vector is likely local, requiring an attacker who can load or influence the NVIDIA kernel module. Successful exploitation could lead to full system compromise. The absence of public exploit code means the risk remains moderate but should be mitigated promptly.