CVE-2026-47571 PUBLISHED

Assigner: nvidia
Reserved: 19.05.2026 Published: 30.09.2026 Updated: 30.09.2026

NVIDIA GPU Display Driver for Windows contains a vulnerability in kernel-mode escape handling where an attacker with local access could bypass an authorization check that is intended to restrict certain operations based on client execution context. A successful exploit of this vulnerability might lead to escalation of privilege, information disclosure, data tampering, denial of service, or code execution.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.8

Product Status

Vendor NVIDIA
Product GeForce
Versions Default: unaffected
  • Version All driver versions prior to 610.60 is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 610.88 is affected
Vendor NVIDIA
Product GeForce
Versions Default: unaffected
  • Version All driver versions prior to 616.56 is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 616.92 is affected
Vendor NVIDIA
Product GeForce
Versions Default: unaffected
  • Version All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected. is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 582.78 is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 596.86 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 596.86 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 596.86 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 616.92 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 610.88 is affected
Vendor NVIDIA
Product Guest driver
Versions Default: unaffected
  • Version 596.36(All versions prior to and including vGPU 20.1) is affected
Vendor NVIDIA
Product Guest driver
Versions Default: unaffected
  • Version 582.53(All versions prior to and including vGPU 19.5) is affected
Vendor NVIDIA
Product Virtual GPU Manager
Versions Default: unaffected
  • Version 596.38(All versions prior to and including vGPU 20.1) is affected
Vendor NVIDIA
Product Virtual GPU Manager
Versions Default: unaffected
  • Version 582.51(All versions prior to and including vGPU 19.5) is affected

References

Problem Types

  • CWE-863 Incorrect Authorization CWE

Impacts

  • code execution, escalation of privileges, data tampering, denial of service, information disclosure