The NVIDIA GeForce GPU Display Driver for Windows and Linux contains a use-after-free vulnerability (CWE-416) identified as CVE-2026-47590. An unprivileged user can cause this condition by issuing a sequence of driver commands. Successful exploitation may result in code execution, escalation of privileges, denial of service, and information disclosure. The CVSS v3.1 base score is 7.8 with attack vector local, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

An attacker with local access and low privileges could exploit this vulnerability to execute arbitrary code, escalate privileges, cause denial of service, or disclose sensitive information on affected systems running the NVIDIA GeForce GPU Display Driver. This could compromise system integrity and confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users and monitor for unusual activity related to the GPU driver.