CVE-2026-24191

HighCVSS 7.8/10Last modified Jul 24, 2026

Description

NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-367

Affected software

VendorProductVersions
NVIDIAGeForceAll driver versions prior to 596.36
NVIDIAGeForceAll driver versions prior to 582.53 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 596.36
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 582.53
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 539.72
NVIDIATeslaAll driver versions prior to 596.36
NVIDIATeslaAll driver versions prior to 582.53
NVIDIATeslaAll driver versions prior to 539.72
NVIDIAGuest driver595.97(All versions prior to and including vGPU 20.0)
NVIDIAGuest driver582.16(All versions prior to and including vGPU 19.4)
NVIDIAGuest driver539.64(All versions prior to and including vGPU 16.13)
NVIDIAVirtual GPU Manager595.94(All versions prior to and including vGPU 20.0)
NVIDIAVirtual GPU Manager582.16(All versions prior to and including vGPU 19.4)

References

Timeline

Published
May 26, 2026
Last modified
Jul 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-241927.8NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leadinCVE-2026-241937.8NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful explCVE-2026-241947.8NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handliCVE-2026-241955.5NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit ofCVE-2026-241967.1NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A successful exploit of this vulnerCVE-2026-241976.5NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default iniCVE-2026-241985.6NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memoryCVE-2026-241994.7NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compileCVE-2026-24204.4The LotekMedia Popup Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, aCVE-2026-242007.0NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. ACVE-2026-242015.8NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successfulCVE-2026-242046.5NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit
CVE-2026-24191: High severity, CVSS 7.8 | Vulnix