← Back to search

CVE-2026-47556

7.8 HIGHpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI risk analysis

Summary
The flaw is an integer overflow in the NVIDIA GPU Display Driver that can lead to out-of-bounds writes, potentially allowing unprivileged users to execute code, cause a denial of service, escalate privileges, disclose information, and tamper with data. This matters because it significantly impacts system security and stability.
Exploitability
Exploitation requires local user privileges and could be moderately difficult due to the need to trigger the integer overflow condition. Precondition is the presence of the vulnerable NVIDIA driver version.
Blast radius
If exploited, this vulnerability could lead to complete system compromise, including code execution, data loss, and unauthorized access, affecting both Windows and Linux systems.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to the fixed version 535.86 or later.
rcepriv-escalationdata-tamperinginfo-disclosurelocal-privilegegpu

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an integer overflow that leads to an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-190

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.