{"id":"CVE-2026-47518","title":"NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a critical resource allows an attacker with privileged local access to modify prote…","summary":"NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a critical resource allows an attacker with privileged local access to modify prote…","severity":"medium","cvss":6,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-732"],"vendor":"NVIDIA","product":"GeForce","affected":["GeForce All driver versions prior to 610.60","rtx_quadro_nvs All driver versions prior to 610.88","GeForce All driver versions prior to 616.56","rtx_quadro_nvs All driver versions prior to  616.92","GeForce All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.","rtx_quadro_nvs All driver versions prior to 582.78","rtx_quadro_nvs All driver versions prior to 596.86","Tesla All driver versions prior to 596.86","Tesla All driver versions prior to 596.86","Tesla All driver versions prior to 616.92","Tesla All driver versions prior to 610.88","GeForce All driver versions prior to 615.71.09","GeForce All driver versions prior to 610.57.04","rtx_quadro_nvs All driver versions prior to 615.71.09","rtx_quadro_nvs All driver versions prior to 610.57.04","rtx_quadro_nvs All driver versions prior to 595.91.07","rtx_quadro_nvs All driver versions prior to 580.178.04","Tesla All driver versions prior to 615.71.09","Tesla All driver versions prior to 610.57.04","Tesla All driver versions prior to 595.91.07","Tesla All driver versions prior to 580.178.04","GeForce All driver versions prior to 595.91.07","GeForce All driver versions prior to 580.178.04"],"published":"2026-09-30","updated":"2026-09-30","sourceUpdated":"2026-09-30T18:18:22.913","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-47518","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","label":"psirt@nvidia.com"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47518","label":"psirt@nvidia.com"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47518","label":"psirt@nvidia.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-30T16:47:00.659906Z"},"ingestedAt":"2026-09-30T16:10:07.316Z","slug":"CVE-2026-47518","body":"## Overview\n\nNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a critical resource allows an attacker with privileged local access to modify protected memory that should be restricted. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":33,"depthScoreParts":{"impact":33,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}