CVE-2026-47518: Medium severity Nvidia GPU Display Driver for Windows and Linux vulnerability
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a critical resource allows an attacker with privileged local access to modify protected memory that should be restricted. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this vulnerability?
Systems running the NVIDIA GPU Display Driver on Windows or Linux are in scope. Exploitation requires an attacker to already have privileged local access, so it is not described as a remote or unauthenticated attack.
What access does an attacker need to exploit it?
An attacker needs privileged local access and must overcome high attack complexity. No user interaction is required.
What could a successful exploit allow?
A successful exploit may allow modification of protected memory in the secure microcontroller component. This could lead to code execution and escalation of privileges, with high confidentiality and integrity impact and low availability impact.