CVE-2026-47590
Awaiting Analysis Awaiting Analysis - Queue

Use-After-Free in NVIDIA GPU Display Driver

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: NVIDIA Corporation

Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-47590
EUVD
EUVD-2026-90132

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nvidia gpu_display_driver *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-416 The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

NVIDIA GPU Display Driver has a use-after-free vulnerability. An unprivileged user can trigger this by sending specific driver commands. This flaw may allow code execution, privilege escalation, denial of service, or information disclosure.

Detection Guidance

Detection of this vulnerability requires checking for specific driver versions and monitoring for unusual GPU driver command sequences. Use NVIDIA's official tools like nvidia-smi or nvidia-debugdump to inspect driver versions and logs. Check system logs for GPU-related errors or crashes that may indicate exploitation attempts.

Impact Analysis

If exploited, this vulnerability could let attackers run malicious code, gain higher system privileges, crash the system, or steal sensitive data. It primarily affects systems using NVIDIA GPU Display Driver.

Mitigation Strategies

Immediately update NVIDIA GPU Display Driver to the latest patched version from NVIDIA's official website. Restrict user access to GPU driver commands where possible. Monitor system behavior for signs of exploitation and apply additional security controls like disabling unnecessary GPU features if updates are delayed.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47590. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart