CVE-2026-47583 PUBLISHED

Assigner: nvidia
Reserved: 19.05.2026 Published: 30.09.2026 Updated: 30.09.2026

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause type confusion. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.8

Product Status

Vendor NVIDIA
Product GeForce
Versions Default: unaffected
  • Version All driver versions prior to 610.60 is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 610.88 is affected
Vendor NVIDIA
Product GeForce
Versions Default: unaffected
  • Version All driver versions prior to 616.56 is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 616.92 is affected
Vendor NVIDIA
Product GeForce
Versions Default: unaffected
  • Version All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected. is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 582.78 is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 596.86 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 596.86 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 596.86 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 616.92 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 610.88 is affected

References

Problem Types

  • CWE-843 Access of Resource Using Incompatible Type ('Type Confusion') CWE

Impacts

  • code execution, escalation of privileges, data tampering, denial of service, information disclosure