Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and denial of service.
Published: 2026-09-30
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Privilege Escalation and Potential Code Execution
Action: Patch ASAP
AI Analysis

Impact

The vulnerability resides in NVIDIA GPU Display Driver for Windows and allows an unprivileged user to perform an out‑of‑bounds write in the kernel mode layer. This flaw is a stack‑based buffer overflow, classified as CWE-121. An attacker who succeeds can overwrite critical kernel memory, gain execution privileges, and potentially execute arbitrary code or crash the system.

Affected Systems

Affected products include NVIDIA GeForce, RTX, Quadro, NVS, Tesla, and the NVIDIA Guest driver. No specific version information is provided, so all consumer and professional GPU families that ship the standard driver are potentially impacted.

Risk and Exploitability

The CVSS score of 7.8 indicates high severity. EPSS information is not available, so the exact exploitation probability cannot be quantified, and the vulnerability is not listed in CISA KEV. The attack vector is local; an attacker needs only unprivileged access to the machine to trigger the out‑of‑bounds write and achieve privilege escalation, code execution, or denial of service.

Generated by OpenCVE AI on September 30, 2026 at 18:45 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest NVIDIA GPU Display Driver update that addresses the buffer overflow when it becomes available.
  • Restrict local user privileges to prevent unprivileged users from loading or interacting with the driver, using Windows security policies or group policy settings.
  • Monitor system logs for kernel or driver‑related alerts and consider disabling the NVIDIA Guest driver if not required.

Generated by OpenCVE AI on September 30, 2026 at 18:45 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 30 Sep 2026 23:15:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Vendors & Products Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla

Wed, 30 Sep 2026 19:15:00 +0000

Type Values Removed Values Added
Title Kernel‑mode Out‑of‑Bounds Write in NVIDIA GPU Display Driver Elevates Privileges

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and denial of service.
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-02T03:55:24.445Z

Reserved: 2026-05-19T19:55:49.283Z

Link: CVE-2026-47593

cve-icon Vulnrichment

Updated: 2026-09-30T17:56:18.879Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:29.370

Modified: 2026-10-02T04:18:08.737

Link: CVE-2026-47593

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T23:00:16Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow