ZDI-CAN-28677 HIGH 7.8 Upcoming Feb 05, 2026

NVIDIA

NVIDIA, a leading manufacturer of graphics processors and AI computing hardware, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no authentication to exploit, potentially allowing attackers with local access to compromise system confidentiality, integrity, and availability. The attack vector indicates this is not remotely exploitable and must be triggered through user action on an affected system. Security teams should monitor for this advisory's public disclosure around the June 2026 deadline and prepare patches for NVIDIA GPU drivers and related software used in their enterprise environments.

Advisory Details
Researcher Tyler Zars
Reported February 05, 2026
Deadline June 05, 2026 50d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy