CVE-2026-24200

HighCVSS 7.0/10Last modified Jul 24, 2026

Description

NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
NVIDIAVirtual GPU Manager595.58.02(All versions up to and including the March 2026 release)
NVIDIAVirtual GPU Manager580.126.08(All versions prior to and including vGPU 19.4)
NVIDIAVirtual GPU Manager535.288.01(All versions prior to and including vGPU 16.13)
NVIDIAVirtual GPU Manager595.94(All versions prior to and including vGPU 20.0)
NVIDIAVirtual GPU Manager582.16(All versions prior to and including vGPU 19.4)

References

Timeline

Published
May 26, 2026
Last modified
Jul 24, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-242015.8NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successfulCVE-2026-242046.5NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit CVE-2026-242069.8NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of thisCVE-2026-242079.8NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of thisCVE-2026-242087.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vCVE-2026-242097.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vCVE-2026-24216.5The ilGhera Carta Docente for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 vCVE-2026-242107.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow. A successful exploit of this vulnCVE-2026-242129.8NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A successful exploit ofCVE-2026-242139.8NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successfuCVE-2026-242149.8NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow. A successful CVE-2026-242157.5NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption
CVE-2026-24200: High severity, CVSS 7.0 | Vulnix