CVE-2026-47571: CWE-863 Incorrect Authorization in NVIDIA GeForce
NVIDIA GPU Display Driver for Windows contains a vulnerability in kernel-mode escape handling where an attacker with local access could bypass an authorization check that is intended to restrict certain operations based on client execution context. A successful exploit of this vulnerability might lead to escalation of privilege, information disclosure, data tampering, denial of service, or code execution.
AI Analysis
Technical Summary
This vulnerability exists in the NVIDIA GPU Display Driver for Windows where the kernel-mode escape handling mechanism fails to properly enforce authorization checks. An attacker with local access can bypass these checks, potentially enabling unauthorized operations that compromise system security. The flaw is categorized under CWE-863 (Incorrect Authorization). The CVSS v3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation may allow an attacker with local access to escalate privileges, disclose sensitive information, tamper with data, cause denial of service, or execute arbitrary code on the affected system. This can compromise system integrity and confidentiality.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, restrict local access to trusted users only.
CVE-2026-47571: CWE-863 Incorrect Authorization in NVIDIA GeForce
Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in kernel-mode escape handling where an attacker with local access could bypass an authorization check that is intended to restrict certain operations based on client execution context. A successful exploit of this vulnerability might lead to escalation of privilege, information disclosure, data tampering, denial of service, or code execution.
CVSS v3.1
Score 7.8high
Affected software
NVIDIA
GeForce
NVIDIA
RTX, Quadro, NVS
NVIDIA
GeForce
NVIDIA
RTX, Quadro, NVS
NVIDIA
GeForce
NVIDIA
RTX, Quadro, NVS
NVIDIA
RTX, Quadro, NVS
NVIDIA
Tesla
NVIDIA
Tesla
NVIDIA
Tesla
NVIDIA
Guest driver
NVIDIA
Guest driver
NVIDIA
Virtual GPU Manager
NVIDIA
Virtual GPU Manager
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability exists in the NVIDIA GPU Display Driver for Windows where the kernel-mode escape handling mechanism fails to properly enforce authorization checks. An attacker with local access can bypass these checks, potentially enabling unauthorized operations that compromise system security. The flaw is categorized under CWE-863 (Incorrect Authorization). The CVSS v3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation may allow an attacker with local access to escalate privileges, disclose sensitive information, tamper with data, cause denial of service, or execute arbitrary code on the affected system. This can compromise system integrity and confidentiality.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, restrict local access to trusted users only.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- nvidia
- Date Reserved
- 2026-05-19T19:55:47.437Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6abd36992a4e24523d3a8df6
Added to database: 09/30/2026, 16:19:37 UTC
Last enriched: 09/30/2026, 16:48:26 UTC
Last updated: 10/01/2026, 04:57:37 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.