Vulnerability · Published Sep 30, 2026 · Assigned by nvidia

CVE-2026-47570

High 7.8

In plain English

A high-severity uncontrolled search path in GeForce from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 96.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the CUDA driver where an attacker could cause a library to be loaded from an uncontrolled search path. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.

Affected products (as reported)

VendorProductVersions
NVIDIA GeForce All driver versions prior to 610.60
NVIDIA RTX, Quadro, NVS All driver versions prior to 610.88
NVIDIA GeForce All driver versions prior to 616.56
NVIDIA RTX, Quadro, NVS All driver versions prior to 616.92
NVIDIA Tesla All driver versions prior to 596.86
NVIDIA Tesla All driver versions prior to 616.92
NVIDIA Tesla All driver versions prior to 610.88
NVIDIA Guest driver 596.36(All versions prior to and including vGPU 20.1)
NVIDIA Guest driver 582.53(All versions prior to and including vGPU 19.5)

Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References