nvidia-driver: nvidia-driver: Code execution via out-of-bounds write in kernel module
cve CVE-2026-47582 3 sources, 3 claims · Watch
Red Hat writes:
nvidia-driver: nvidia-driver: Code execution via out-of-bounds write in kernel module the claim
nvidia-driver: nvidia-driver: Code execution via out-of-bounds write in kernel module the claim
What it is to other things
In words only, so not counted until a person confirms one:
| affects | nvidia/geforceNVD says “NVIDIA · GeForce” |
| made_by | nvidiaNVD says “NVIDIA” |
What each source says
| Property | Source | Said | Means here |
|---|---|---|---|
| Cvss cvss | GitHub advisories | 7receipt
What the source handed over{
"credits": [],
"cve_id": "CVE-2026-47582",
"cvss": {
"score": 7.0,
"vector_string": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
"cvss_severities": {
"cvss_v3": {
"score": 7.0,
"vector_string": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
"cvss_v4": {
"score": 0.0,
"vector_string": null
}
},
"cwes": [
{
"cwe_id": "CWE-787",
"name": "Out-of-bounds Write"
}
],
"description": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.",
"epss": {
"percentage": 0.00165,
"percentile": 0.05097
},
"ghsa_id": "GHSA-wrcw-86v9-6jrx",
"github_reviewed_at": null,
"html_url": "https://github.com/advisories/GHSA-wrcw-86v9-6jrx",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-wrcw-86v9-6jrx"
},
{
"type": "CVE",
"value": "CVE-2026-47582"
}
],
"nvd_published_at": "2026-09-30T16:17:27Z",
"published_at": "2026-09-30T18:33:46Z",
"references": [
"https://nvd.nist.gov/vuln/detail/CVE-2026-47582",
"https://github.com/NVIDIA/product-security/tree/main/2026/5861",
"https://www.cve.org/CVERecord?id=CVE-2026-47582",
"https://github.com/advisories/GHSA-wrcw-86v9-6jrx"
],
"repository_advisory_url": null,
"severity": "high",
"source_code_location": "",
"summary": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an...",
"type": "unreviewed",
"updated_at": "2026-09-30T18:33:54Z",
"url": "https://api.github.com/advisories/GHSA-wrcw-86v9-6jrx",
"vulnerabilities": [],
"withdrawn_at": null
} | — |
| Cvss cvss | NVD | 7receipt
What the source handed over{
"cve": {
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.60"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.56"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected."
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.36(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.53(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"source": "psirt@nvidia.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"id": "CVE-2026-47582",
"lastModified": "2026-10-01T04:18:17.673",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9,
"source": "psirt@nvidia.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-47582",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
}
}
]
},
"published": "2026-09-30T16:17:27.710",
"references": [
{
"source": "psirt@nvidia.com",
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
},
{
"source": "psirt@nvidia.com",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47582"
},
{
"source": "psirt@nvidia.com",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47582"
}
],
"sourceIdentifier": "psirt@nvidia.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "psirt@nvidia.com",
"type": "Secondary"
}
]
}
} | — |
| Cvss cvss | Red Hat | 7receipt
What the source handed over{
"CVE": "CVE-2026-47582",
"CWE": "CWE-787",
"advisories": [],
"affected_packages": [],
"bugzilla": "2544043",
"bugzilla_description": "nvidia-driver: nvidia-driver: Code execution via out-of-bounds write in kernel module",
"cvss3_score": "7.0",
"cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"cvss_score": null,
"cvss_scoring_vector": null,
"package_state": null,
"public_date": "2026-09-30T15:52:10Z",
"resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-47582.json",
"severity": "moderate"
} | — |
| Cwe cwe | GitHub advisories | CWE-787receipt
What the source handed over{
"credits": [],
"cve_id": "CVE-2026-47582",
"cvss": {
"score": 7.0,
"vector_string": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
"cvss_severities": {
"cvss_v3": {
"score": 7.0,
"vector_string": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
"cvss_v4": {
"score": 0.0,
"vector_string": null
}
},
"cwes": [
{
"cwe_id": "CWE-787",
"name": "Out-of-bounds Write"
}
],
"description": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.",
"epss": {
"percentage": 0.00165,
"percentile": 0.05097
},
"ghsa_id": "GHSA-wrcw-86v9-6jrx",
"github_reviewed_at": null,
"html_url": "https://github.com/advisories/GHSA-wrcw-86v9-6jrx",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-wrcw-86v9-6jrx"
},
{
"type": "CVE",
"value": "CVE-2026-47582"
}
],
"nvd_published_at": "2026-09-30T16:17:27Z",
"published_at": "2026-09-30T18:33:46Z",
"references": [
"https://nvd.nist.gov/vuln/detail/CVE-2026-47582",
"https://github.com/NVIDIA/product-security/tree/main/2026/5861",
"https://www.cve.org/CVERecord?id=CVE-2026-47582",
"https://github.com/advisories/GHSA-wrcw-86v9-6jrx"
],
"repository_advisory_url": null,
"severity": "high",
"source_code_location": "",
"summary": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an...",
"type": "unreviewed",
"updated_at": "2026-09-30T18:33:54Z",
"url": "https://api.github.com/advisories/GHSA-wrcw-86v9-6jrx",
"vulnerabilities": [],
"withdrawn_at": null
} | — |
| Cwe cwe | Red Hat | CWE-787receipt
What the source handed over{
"CVE": "CVE-2026-47582",
"CWE": "CWE-787",
"advisories": [],
"affected_packages": [],
"bugzilla": "2544043",
"bugzilla_description": "nvidia-driver: nvidia-driver: Code execution via out-of-bounds write in kernel module",
"cvss3_score": "7.0",
"cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"cvss_score": null,
"cvss_scoring_vector": null,
"package_state": null,
"public_date": "2026-09-30T15:52:10Z",
"resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-47582.json",
"severity": "moderate"
} | — |
| Product product | NVD | GeForcereceipt
What the source handed over{
"cve": {
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.60"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.56"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected."
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.36(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.53(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"source": "psirt@nvidia.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"id": "CVE-2026-47582",
"lastModified": "2026-10-01T04:18:17.673",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9,
"source": "psirt@nvidia.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-47582",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
}
}
]
},
"published": "2026-09-30T16:17:27.710",
"references": [
{
"source": "psirt@nvidia.com",
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
},
{
"source": "psirt@nvidia.com",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47582"
},
{
"source": "psirt@nvidia.com",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47582"
}
],
"sourceIdentifier": "psirt@nvidia.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "psirt@nvidia.com",
"type": "Secondary"
}
]
}
} | — |
| Severity severity conflict | GitHub advisories | high From 7.0 to 8.9. receipt
What the source handed over{
"credits": [],
"cve_id": "CVE-2026-47582",
"cvss": {
"score": 7.0,
"vector_string": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
"cvss_severities": {
"cvss_v3": {
"score": 7.0,
"vector_string": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
"cvss_v4": {
"score": 0.0,
"vector_string": null
}
},
"cwes": [
{
"cwe_id": "CWE-787",
"name": "Out-of-bounds Write"
}
],
"description": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.",
"epss": {
"percentage": 0.00165,
"percentile": 0.05097
},
"ghsa_id": "GHSA-wrcw-86v9-6jrx",
"github_reviewed_at": null,
"html_url": "https://github.com/advisories/GHSA-wrcw-86v9-6jrx",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-wrcw-86v9-6jrx"
},
{
"type": "CVE",
"value": "CVE-2026-47582"
}
],
"nvd_published_at": "2026-09-30T16:17:27Z",
"published_at": "2026-09-30T18:33:46Z",
"references": [
"https://nvd.nist.gov/vuln/detail/CVE-2026-47582",
"https://github.com/NVIDIA/product-security/tree/main/2026/5861",
"https://www.cve.org/CVERecord?id=CVE-2026-47582",
"https://github.com/advisories/GHSA-wrcw-86v9-6jrx"
],
"repository_advisory_url": null,
"severity": "high",
"source_code_location": "",
"summary": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an...",
"type": "unreviewed",
"updated_at": "2026-09-30T18:33:54Z",
"url": "https://api.github.com/advisories/GHSA-wrcw-86v9-6jrx",
"vulnerabilities": [],
"withdrawn_at": null
} | — |
| Severity severity conflict | Red Hat | moderate A flaw that is harder to exploit, or whose impact is limited. receipt
What the source handed over{
"CVE": "CVE-2026-47582",
"CWE": "CWE-787",
"advisories": [],
"affected_packages": [],
"bugzilla": "2544043",
"bugzilla_description": "nvidia-driver: nvidia-driver: Code execution via out-of-bounds write in kernel module",
"cvss3_score": "7.0",
"cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"cvss_score": null,
"cvss_scoring_vector": null,
"package_state": null,
"public_date": "2026-09-30T15:52:10Z",
"resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-47582.json",
"severity": "moderate"
} | medium |
| Status status | NVD | Awaiting Analysisreceipt
What the source handed over{
"cve": {
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.60"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.56"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected."
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.36(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.53(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"source": "psirt@nvidia.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"id": "CVE-2026-47582",
"lastModified": "2026-10-01T04:18:17.673",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9,
"source": "psirt@nvidia.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-47582",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
}
}
]
},
"published": "2026-09-30T16:17:27.710",
"references": [
{
"source": "psirt@nvidia.com",
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
},
{
"source": "psirt@nvidia.com",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47582"
},
{
"source": "psirt@nvidia.com",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47582"
}
],
"sourceIdentifier": "psirt@nvidia.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "psirt@nvidia.com",
"type": "Secondary"
}
]
}
} | — |
| Vendor vendor | NVD | NVIDIAreceipt
What the source handed over{
"cve": {
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.60"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.56"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected."
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.36(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.53(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"source": "psirt@nvidia.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"id": "CVE-2026-47582",
"lastModified": "2026-10-01T04:18:17.673",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9,
"source": "psirt@nvidia.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-47582",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
}
}
]
},
"published": "2026-09-30T16:17:27.710",
"references": [
{
"source": "psirt@nvidia.com",
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
},
{
"source": "psirt@nvidia.com",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47582"
},
{
"source": "psirt@nvidia.com",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47582"
}
],
"sourceIdentifier": "psirt@nvidia.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "psirt@nvidia.com",
"type": "Secondary"
}
]
}
} | — |
vulnerability
| nvidia-driver: nvidia-driver: Code execution via out-of-bounds write in kernel module zetlyn/cve-redhat · 2026-09-30 | cvss 7 cwe CWE-787 severity moderate | source |
| NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. zetlyn/cve-nvd · 2026-09-30 | cvss 7 product GeForce status Awaiting Analysis vendor NVIDIA | source |
| NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an... zetlyn/cve-ghsa · 2026-09-30 | cvss 7 cwe CWE-787 severity high | source |