{"schemaVersion":3,"id":"CVE-2026-47550","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged local user can supply an untrusted pointer that the driver dereferences without validation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","dates":{"published":"2026-09-30T15:50:09.549Z","modified":"2026-10-01T03:56:35.173Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00129,"percentile":0.02318,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-01T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00129,"percentile":0.02318}],"last30":[{"date":"2026-10-01T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00129,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00129,"percentile":0.02318}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"nvidia","product":"geforce","name":"geforce","label":"geforce","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All driver versions prior to 610.60","noFixRecorded":false,"fixedIn":null},{"text":"All driver versions prior to 616.56","noFixRecorded":false,"fixedIn":null},{"text":"All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.","noFixRecorded":false,"fixedIn":null}],"versionsText":"All driver versions prior to 610.60 | All driver versions prior to 616.56 | All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.","eol":null,"hubHref":"/vendor/nvidia/geforce"},{"vendor":"nvidia","product":"rtx, quadro, nvs","name":"RTX, Quadro, NVS","label":"rtx, quadro, nvs","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All driver versions prior to 610.88","noFixRecorded":false,"fixedIn":null},{"text":"All driver versions prior to  616.92","noFixRecorded":false,"fixedIn":null},{"text":"All driver versions prior to 582.78","noFixRecorded":false,"fixedIn":null},{"text":"All driver versions prior to 596.86","noFixRecorded":false,"fixedIn":null}],"versionsText":"All driver versions prior to 610.88 | All driver versions prior to  616.92 | All driver versions prior to 582.78 | All driver versions prior to 596.86","eol":null,"hubHref":"/vendor/nvidia/rtx_quadro_nvs"},{"vendor":"nvidia","product":"tesla","name":"tesla","label":"tesla","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All driver versions prior to 596.86","noFixRecorded":false,"fixedIn":null},{"text":"All driver versions prior to 616.92","noFixRecorded":false,"fixedIn":null},{"text":"All driver versions prior to 610.88","noFixRecorded":false,"fixedIn":null}],"versionsText":"All driver versions prior to 596.86 | All driver versions prior to 616.92 | All driver versions prior to 610.88","eol":null,"hubHref":"/vendor/nvidia/tesla"},{"vendor":"nvidia","product":"virtual_gpu_manager","name":"virtual gpu manager","label":"virtual_gpu_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"596.38(All versions prior to and including vGPU 20.1)","noFixRecorded":false,"fixedIn":null},{"text":"582.51(All versions prior to and including vGPU 19.5)","noFixRecorded":false,"fixedIn":null}],"versionsText":"596.38(All versions prior to and including vGPU 20.1) | 582.51(All versions prior to and including vGPU 19.5)","eol":null,"hubHref":"/vendor/nvidia/virtual_gpu_manager"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47550","label":"nvd.nist.gov/vuln/detail/CVE-2026-47550","hostname":"nvd.nist.gov","tags":[]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47550","label":"www.cve.org/CVERecord?id=CVE-2026-47550","hostname":"www.cve.org","tags":[]},{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","label":"github.com/NVIDIA/product-security/tree/main/2026/5861","hostname":"github.com","tags":[]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-09-30T15:50:09.549Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-01T03:56:35.173Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T00:28:59.984Z","stale":false,"partial":false}}