Vulnerability · Published May 26, 2026 · Assigned by nvidia

CVE-2026-24191

High 7.8

In plain English

A high-severity security flaw in GeForce from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 96.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

Affected products (as reported)

VendorProductVersions
NVIDIA GeForce All driver versions prior to 596.36
NVIDIA GeForce All driver versions prior to 582.53 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.
NVIDIA NVIDIA RTX, Quadro, NVS All driver versions prior to 596.36
NVIDIA NVIDIA RTX, Quadro, NVS All driver versions prior to 582.53
NVIDIA NVIDIA RTX, Quadro, NVS All driver versions prior to 539.72
NVIDIA Tesla All driver versions prior to 596.36
NVIDIA Tesla All driver versions prior to 582.53
NVIDIA Tesla All driver versions prior to 539.72
NVIDIA Guest driver 595.97(All versions prior to and including vGPU 20.0)
NVIDIA Guest driver 582.16(All versions prior to and including vGPU 19.4)
NVIDIA Guest driver 539.64(All versions prior to and including vGPU 16.13)
NVIDIA Virtual GPU Manager 595.94(All versions prior to and including vGPU 20.0)
NVIDIA Virtual GPU Manager 582.16(All versions prior to and including vGPU 19.4)

Weakness: CWE-367 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

References