{"id":"CVE-2026-47508","published":"2026-09-30T16:17:16.110","lastModified":"2026-10-01T04:18:09.500","description":"NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an incorrect conversion between numeric types. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-681"],"vendors":[],"products":[],"references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47508","tags":[]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47508","tags":[]}],"exploitRefs":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw involves an incorrect conversion between numeric types in the NVIDIA GPU Display Driver, which could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. This vulnerability is significant because it allows a user to exploit the driver's kernel mode layer to gain unauthorized access and control over the system.","exploitability":"Exploiting this vulnerability is considered moderately difficult as it requires a user to trigger the incorrect conversion, which may be challenging to achieve without specific knowledge of the driver's implementation. Precondition is access to the affected NVIDIA GPU Display Driver version.","blast_radius":"If exploited, the impact could be severe, leading to unauthorized code execution, system crashes, and potential data breaches, affecting both Windows and Linux systems.","remediation":"Upgrade to the fixed version 535.69 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","data-tampering","denial-of-service"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:42:40.320Z"}}