CVE-2026-47589: Use After Free
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and information disclosure.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unprivileged local user can trigger the vulnerability. The attack vector is local, so it is not described as remotely exploitable from the network.
What access and actions are required for exploitation?
The attacker needs low-level privileges and must issue a sequence of GPU driver commands that causes a use-after-free condition. No user interaction is required.
What could happen if exploitation succeeds?
Successful exploitation may enable code execution, privilege escalation, denial of service, or information disclosure. The CVSS vector indicates high impact to confidentiality, integrity, and availability.
Are affected versions or mitigations specified?
The provided information identifies NVIDIA GPU Display Driver for Windows and Linux but does not specify affected versions, fixed versions, default-configuration status, or temporary mitigations.