{"id":"CVE-2026-47577","published":"2026-09-30T16:17:26.990","lastModified":"2026-10-01T04:18:17.233","description":"NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an incorrect comparison. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-190"],"vendors":[],"products":[],"references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47577","tags":[]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47577","tags":[]}],"exploitRefs":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]}],"hasPoc":true,"ai":{"summary":"The vulnerability in NVIDIA GPU Display Driver for Windows allows an attacker to cause an incorrect comparison in the kernel module, potentially leading to code execution, denial of service, privilege escalation, information disclosure, and data tampering.","exploitability":"Exploitation requires local access and could be moderately difficult due to the need for precise timing and conditions to trigger the incorrect comparison.","blast_radius":"If exploited, the impact could be severe, affecting the system's stability, security, and integrity, potentially leading to full system compromise.","remediation":"Upgrade to the specific fixed version: 'Upgrade to 2.590 or later'.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","information-disclosure","denial-of-service"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:41:57.101Z"}}