NVIDIA Display Driver EUVD-2026-90105

Requires local access with an unprivileged account on a system running the NVIDIA GPU Display Driver for Windows or Linux, or the vGPU software's Virtual GPU Manager on a hypervisor host. Exploitation targets the kernel-mode layer of the driver, so a functioning NVIDIA GPU/driver stack must be installed and loaded (default state on GeForce, RTX/Quadro/NVS, and Tesla systems with NVIDIA drivers). Limiting factors: attack is local only (AV:L) - there is no remote/network attack surface - so an attacker must first have code-execution or shell access on the host; no user interaction is needed (UI:N) and only low privileges are required (PR:L).

This is a genuine local privilege-escalation priority despite lacking any exploitation-probability signals. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U, C:H/I:H/A:H, base 7.8 HIGH) describes a low-complexity, low-privilege local attack with no user interaction and full compromise of confidentiality, integrity, and availability - the classic profile of a kernel-mode driver bug abused for local privilege escalation from an unprivileged account to kernel/SYSTEM. No EPSS score, no CISA KEV listing, and no public POC were provided, so there is no evidence of active exploitation or automatable mass abuse; the risk is therefore driven by impact severity and product ubiquity rather than by observed in-the-wild activity. The signals are internally consistent (no CVSS-vs-description conflict): the description's 'kernel mode layer' and 'escalation of privileges' outcomes align with AV:L and S:U. The main caveat is that the vendor description lists a very broad outcome set (code execution, DoS, EoP, information disclosure, data tampering) that reads as a worst-case catalog rather than a single confirmed exploit path - the CVSS C:H/I:H/A:H reflects that maximal envelope, so real-world impact of any specific exploit may be narrower. Treat as a standard-but-important patch-soon local kernel vulnerability, not an emergency remote 0-day.

A local attacker with an unprivileged account on a Windows or Linux host running the NVIDIA GPU Display Driver (or vGPU Virtual GPU Manager on a hypervisor host) issues a crafted request to the kernel-mode driver that triggers an integer underflow (CWE-191), corrupting kernel memory to escalate to SYSTEM/root or crash the machine. No user interaction or elevated privileges are required to reach the vulnerable code path. No public exploit code has been identified at time of analysis.