{"schemaVersion":3,"id":"CVE-2026-47579","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode driver through which a user might trigger a use-after-free condition. Successful exploitation of this issue could lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.","dates":{"published":"2026-09-30T15:50:48.913Z","modified":"2026-10-01T03:56:24.697Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00125,"percentile":0.02024,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-01T00:00:00.000Z","score":0.0016,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00125,"percentile":0.02024}],"last30":[{"date":"2026-10-01T00:00:00.000Z","score":0.0016,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00125,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00125,"percentile":0.02024}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-416","name":"Use After Free","description":"The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","type":"weakness","status":"Stable","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/416.html"}],"affected":[{"vendor":"nvidia","product":"geforce","name":"geforce","label":"geforce","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All driver versions prior to 610.60","noFixRecorded":false,"fixedIn":null},{"text":"All driver versions prior to 616.56","noFixRecorded":false,"fixedIn":null},{"text":"All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.","noFixRecorded":false,"fixedIn":null}],"versionsText":"All driver versions prior to 610.60 | All driver versions prior to 616.56 | All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.","eol":null,"hubHref":"/vendor/nvidia/geforce"},{"vendor":"nvidia","product":"guest driver","name":"Guest driver","label":"guest driver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"596.36(All versions prior to and including vGPU 20.1)","noFixRecorded":false,"fixedIn":null},{"text":"582.53(All versions prior to and including vGPU 19.5)","noFixRecorded":false,"fixedIn":null}],"versionsText":"596.36(All versions prior to and including vGPU 20.1) | 582.53(All versions prior to and including vGPU 19.5)","eol":null,"hubHref":"/vendor/nvidia/guest_driver"},{"vendor":"nvidia","product":"rtx, quadro, nvs","name":"RTX, Quadro, NVS","label":"rtx, quadro, nvs","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All driver versions prior to 610.88","noFixRecorded":false,"fixedIn":null},{"text":"All driver versions prior to 616.92","noFixRecorded":false,"fixedIn":null},{"text":"All driver versions prior to 582.78","noFixRecorded":false,"fixedIn":null}],"versionsText":"All driver versions prior to 610.88 | All driver versions prior to 616.92 | All driver versions prior to 582.78","eol":null,"hubHref":"/vendor/nvidia/rtx_quadro_nvs"},{"vendor":"nvidia","product":"tesla","name":"tesla","label":"tesla","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All driver versions prior to 596.86","noFixRecorded":false,"fixedIn":null},{"text":"All driver versions prior to 616.92","noFixRecorded":false,"fixedIn":null},{"text":"All driver versions prior to 610.88","noFixRecorded":false,"fixedIn":null}],"versionsText":"All driver versions prior to 596.86 | All driver versions prior to 616.92 | All driver versions prior to 610.88","eol":null,"hubHref":"/vendor/nvidia/tesla"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47579","label":"nvd.nist.gov/vuln/detail/CVE-2026-47579","hostname":"nvd.nist.gov","tags":[]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47579","label":"www.cve.org/CVERecord?id=CVE-2026-47579","hostname":"www.cve.org","tags":[]},{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","label":"github.com/NVIDIA/product-security/tree/main/2026/5861","hostname":"github.com","tags":[]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-09-30T15:50:48.913Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-01T03:56:24.697Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T10:08:11.211Z","stale":false,"partial":false}}