CVE-2026-47571: nvidia geforce Incorrect Authorization
Vulnerability summary
CVE-2026-47571 is a high (CVSS 7.8) Incorrect Authorization vulnerability in nvidia geforce. EPSS estimates a 0.12% chance of exploitation in the next 30 days, higher than 1.8% of scored vulnerabilities.
Timeline
- 30-09-2026PublishedVulnerability first disclosed.
- 02-10-2026Last modifiedVulnerability information updated.
Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in kernel-mode escape handling where an attacker with local access could bypass an authorization check that is intended to restrict certain operations based on client execution context. A successful exploit of this vulnerability might lead to escalation of privilege, information disclosure, data tampering, denial of service, or code execution.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.12%
Chance of exploitation in the next 30 days
Percentile
2%
Versus all other CVEs
30-day change
Change unavailable
Change unavailable
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Nvidia5 products
- geforceAll driver versions prior to 610.60 | All driver versions prior to 616.56 | All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.
- guest driver596.36(All versions prior to and including vGPU 20.1) | 582.53(All versions prior to and including vGPU 19.5)
- rtx, quadro, nvsAll driver versions prior to 610.88 | All driver versions prior to 616.92 | All driver versions prior to 582.78 | All driver versions prior to 596.86
- teslaAll driver versions prior to 596.86 | All driver versions prior to 616.92 | All driver versions prior to 610.88
- virtual_gpu_manager596.38(All versions prior to and including vGPU 20.1) | 582.51(All versions prior to and including vGPU 19.5)
1 vendor · 5 products