CVE-2026-47570: nvidia geforce Uncontrolled Search Path Element
Vulnerability summary
CVE-2026-47570 is a high (CVSS 7.8) Uncontrolled Search Path Element vulnerability in nvidia geforce. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 2.7% of scored vulnerabilities.
Timeline
- 30-09-2026PublishedVulnerability first disclosed.
- 02-10-2026Last modifiedVulnerability information updated.
Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in the CUDA driver where an attacker could cause a library to be loaded from an uncontrolled search path. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.14%
Chance of exploitation in the next 30 days
Percentile
3%
Versus all other CVEs
30-day change
Change unavailable
Change unavailable
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Nvidia4 products
- geforceAll driver versions prior to 610.60 | All driver versions prior to 616.56
- guest driver596.36(All versions prior to and including vGPU 20.1) | 582.53(All versions prior to and including vGPU 19.5)
- rtx, quadro, nvsAll driver versions prior to 610.88 | All driver versions prior to 616.92
- teslaAll driver versions prior to 596.86 | All driver versions prior to 616.92 | All driver versions prior to 610.88
1 vendor · 4 products