CVE-2026-47500
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer. Improper cleanup of reference counts during error paths could lead to a use-after-free condition.
Risk Assessment
Successful exploitation might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The vulnerability can be exploited by a local user.
Recommendation
Update the NVIDIA GPU Display Driver to the latest patched version. Consider restricting driver access for unprivileged users.
Other vulnerabilities in NVIDIA GPU Display Driver
See all- CVE-2017-6272High
The NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array. This may lead to denial of service or possible escalation of privileges.
- CVE-2017-6257High
The NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.
- CVE-2017-0352High
All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware that may allow incorrect access to sensitive GPU control registers by the CPU, leading to an escalation of privileges.
- CVE-2017-0351High
All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges.
- CVE-2017-0350High
All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated. This may lead to denial of service or potential escalation of privileges.
- CVE-2017-0321High
All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges.
- CVE-2017-0309High
All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may cause improper memory allocation leading to a denial of service or potential escalation of privileges.
- CVE-2016-7389High
The NVIDIA GPU Display Driver on Linux in versions R304 before 304.132, R340 before 340.98, R367 before 367.55, R361_93 before 361.93.03, and R370 before 370.28 contains a vulnerability in the kernel mode layer (nvidia.ko) handler for mmap(). Improper input validation may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.
- CVE-2026-47604Medium
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure.
- CVE-2026-47603Medium
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure.
Original NVD description (English source)
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts during error paths could lead to a use-after-free condition. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS