CVE-2026-47571

Summary

NVIDIA GPU Display Driver for Windows contains a vulnerability in kernel-mode escape handling where an attacker with local access could bypass an authorization check that is intended to restrict certain operations based on client execution context. A successful exploit of this vulnerability might lead to escalation of privilege, information disclosure, data tampering, denial of service, or code execution.

Affected Software

VendorProductVersion RangeStatus
NVIDIAGeForceAll driver versions prior to 610.60affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 610.88affected
NVIDIAGeForceAll driver versions prior to 616.56affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 616.92affected
NVIDIAGeForceAll driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 582.78affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 596.86affected
NVIDIATeslaAll driver versions prior to 596.86affected
NVIDIATeslaAll driver versions prior to 596.86affected
NVIDIATeslaAll driver versions prior to 616.92affected
NVIDIATeslaAll driver versions prior to 610.88affected
NVIDIAGuest driver596.36(All versions prior to and including vGPU 20.1)affected
NVIDIAGuest driver582.53(All versions prior to and including vGPU 19.5)affected
NVIDIAVirtual GPU Manager596.38(All versions prior to and including vGPU 20.1)affected
NVIDIAVirtual GPU Manager582.51(All versions prior to and including vGPU 19.5)affected

Weaknesses

  • CWE-863: CWE-863 Incorrect Authorization

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References