This vulnerability (CVE-2026-47580) in the NVIDIA GeForce GPU Display Driver for Windows is due to a missing authorization control in the kernel module. An attacker with local privileges could exploit this flaw to disclose sensitive information and tamper with data. The CVSS v3.1 base score is 7.3, reflecting high severity with attack vector local, low attack complexity, low privileges required, no user interaction, scope changed, high confidentiality impact, low integrity impact, and no availability impact. No patch or remediation details are provided in the available data.

Successful exploitation could lead to unauthorized information disclosure and data tampering on affected systems. The vulnerability requires local access with low privileges but does not require user interaction. There is no indication of availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users and monitor for suspicious activity related to the GPU driver. Do not assume the vulnerability is mitigated without vendor confirmation.