CVE-2025-23286: NVIDIA GPU Display Drivers · Out-of-bounds Read
Affects NVIDIA GPU Display DriversSource CVE Database V5
Not known to be exploited · CVSS 4.4 Medium.
Data as of 26 Oct 2026, 11:42 UTC
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 3% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 2 Aug 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
To mitigate CVE-2025-23286, European organizations should: 1) Monitor NVIDIA's official channels for patches or updated driver releases addressing this vulnerability and apply them promptly once available. 2) Restrict administrative and elevated access to trusted personnel only, minimizing the number of users who can exploit local vulnerabilities. 3) Employ strict endpoint security controls, including application whitelisting and behavior monitoring, to detect and prevent unauthorized local code execution or privilege misuse. 4) Conduct regular audits of user privileges and system configurations to ensure adherence to the principle of least privilege. 5) Isolate critical GPU-accelerated workloads on dedicated systems with hardened access controls to reduce exposure. 6) Use virtualization or containerization where feasible to limit the impact scope of potential exploits. 7) Maintain comprehensive logging and alerting to detect suspicious local activities that could indicate exploitation attempts. These steps go beyond generic advice by focusing on access control, monitoring, and isolation tailored to the vulnerability's local and privilege requirements.
Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A successful exploit of this vulnerability might lead to information disclosure.