CVE-2026-47513

7.8 HIGHpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI risk analysis

Summary: The flaw is a kernel heap memory out-of-bounds read in NVIDIA GPU drivers, allowing code execution, data tampering, and privilege escalation. This vulnerability is significant because it can be exploited to gain unauthorized access and control over the system.
Exploitability: Exploitation requires local user privileges and access to the affected NVIDIA GPU driver. The vulnerability is relatively easy to exploit given the necessary conditions.
Blast radius: If exploited, the vulnerability could lead to complete system compromise, including code execution, data loss, and unauthorized access to sensitive information.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to the latest NVIDIA driver version 535.105.01 or later.

rceprivilege-escalationmemory-vulnerability

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read from kernel heap memory. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-125

Public exploit & PoC references

https://github.com/NVIDIA/product-security/tree/main/2026/5861

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.