{"id":"CVE-2026-47500","published":"2026-09-30T16:17:14.743","lastModified":"2026-10-01T04:18:07.890","description":"NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts during error paths could lead to a use-after-free condition. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47500","tags":[]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47500","tags":[]}],"exploitRefs":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw is a use-after-free condition in the NVIDIA GPU Display Driver, which could lead to code execution, denial of service, and privilege escalation. This vulnerability matters because it allows attackers to exploit the driver's improper cleanup of reference counts, potentially leading to severe consequences.","exploitability":"Exploiting this vulnerability requires access to the affected NVIDIA GPU Display Driver and the ability to trigger the error path. The exploit is moderately complex and requires a detailed understanding of the driver's internals.","blast_radius":"If exploited, this vulnerability could impact any system using the affected NVIDIA GPU Display Driver, leading to code execution, denial of service, and potential data breaches.","remediation":"Upgrade to the latest version of the NVIDIA GPU Display Driver, specifically version 531.43 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","driver","os"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:42:46.424Z"}}