NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and information disclosure.
History

Thu, 01 Oct 2026 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Vendors & Products Nvidia
Nvidia geforce
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in NVIDIA GPU Drivers Enables Privilege Escalation and Remote Code Execution nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free
Weaknesses CWE-825
Metrics threat_severity

None

threat_severity

Important


Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in NVIDIA GPU Drivers Enables Privilege Escalation and Remote Code Execution
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and information disclosure.
Weaknesses CWE-416
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published: 2026-09-30T15:51:04.158Z

Updated: 2026-10-02T03:55:20.240Z

Reserved: 2026-05-19T19:55:48.351Z

Link: CVE-2026-47589

cve-icon Vulnrichment

Updated: 2026-09-30T17:56:25.274Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:28.733

Modified: 2026-10-02T04:18:08.047

Link: CVE-2026-47589

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-30T15:51:04Z

Links: CVE-2026-47589 - Bugzilla