Skip to main content

NVIDIA Display Driver CVE-2026-24193

| EUVDEUVD-2026-31929 HIGH
Out-of-bounds Write (CWE-787)
2026-05-26 nvidia GHSA-7gvm-xr2x-wg8x
Nvidia Memory Corruption RCE Information Disclosure Microsoft Buffer Overflow Denial Of Service
7.8
CVSS 3.1 · Vendor: nvidia
Share

Severity by source

Vendor (nvidia) PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SUSE
HIGH
qualitative

Primary rating from Vendor (nvidia).

CVSS VectorVendor: nvidia

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Analysis Generated
Jun 08, 2026 - 10:33 vuln.today
CVE Published
May 26, 2026 - 17:21 nvd
HIGH 7.8

DescriptionCVE.org

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

AnalysisAI

Local privilege escalation in the NVIDIA Display Driver for Windows and Linux allows an authenticated low-privileged user to trigger an out-of-bounds write (CWE-787) in the kernel-mode driver, potentially leading to code execution, privilege escalation, information disclosure, data tampering, or denial of service. The flaw affects GeForce, RTX/Quadro/NVS, and Tesla product lines, with NVIDIA confirming the vulnerability and releasing patched driver versions. No public exploit identified at time of analysis, and EPSS rates exploitation probability at just 0.01%.

Technical ContextAI

NVIDIA's Display Driver provides kernel-mode components on both Windows (nvlddmkm.sys family) and Linux (nvidia.ko) that handle GPU command submission, memory management, and display output. CWE-787 (Out-of-bounds Write) in this context typically arises from missing or incorrect bounds checks when parsing user-supplied data passed via IOCTLs or system calls from user-mode GPU APIs (e.g., DirectX, Vulkan, CUDA) into kernel-mode handlers. Because the driver runs in ring-0, a memory corruption primitive there can be leveraged to overwrite kernel structures and elevate privileges. The CPE list spans nvidia:geforce, nvidia:rtx,_quadro,_nvs, and nvidia:tesla product families, indicating the defect lives in shared driver code used across consumer, workstation, and datacenter GPUs - though the EUVD note clarifies that for GeForce on the 582.53 branch only Maxwell, Volta, and Pascal architectures are affected.

RemediationAI

Vendor-released patches are available from NVIDIA - upgrade to driver branch 535.309.01, 539.72, 580.159.03, or 582.53 (whichever corresponds to the supported branch for your GPU family and operating system) as documented in NVIDIA Security Bulletin ID 5821 (https://nvidia.custhelp.com/app/answers/detail/a_id/5821). On Windows, deploy via GeForce Experience, the NVIDIA Enterprise driver installer, or vendor OEM channels; on Linux, install the updated package from your distribution's repository or NVIDIA's run-file for the matching branch and reboot to load the new kernel module. Where immediate patching is not possible, compensating controls should focus on the local-attacker prerequisite: restrict interactive and remote-code-execution access for non-administrative users on systems with the affected driver (particularly multi-tenant VDI, ML training nodes, and render farms), enforce application allowlisting to limit which processes can call into the GPU driver interface, and use EDR rules to alert on unusual IOCTL patterns against the NVIDIA driver - note these controls reduce but do not eliminate risk and can break legitimate GPU workloads if overly restrictive.

More in Nvidia

View all
CVE-2016-1741 CRITICAL POC
9.8 Mar 24

The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary c
CVE-2013-0109 HIGH POC
7.2 Apr 08

The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not
CVE-2019-5684 CRITICAL POC
10.0 Aug 06

NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially craft
CVE-2026-24207 CRITICAL POC
9.8 May 20

Authentication bypass in NVIDIA Triton Inference Server allows unauthenticated remote attackers to reach protected funct
CVE-2019-5685 CRITICAL POC
9.8 Aug 06

NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially craft
CVE-2025-23359 HIGH POC
8.3 Feb 12

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default co
CVE-2016-8812 HIGH POC
8.8 Nov 08

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before G
CVE-2016-1861 HIGH POC
7.8 Jun 19

The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privi
CVE-2024-0132 HIGH POC
8.3 Sep 26

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with de
CVE-2016-1846 HIGH POC
7.8 May 20

The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows a
CVE-2015-7865 HIGH POC
7.7 Nov 24

nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before

CVE-2016-8811 HIGH POC
7.8 Nov 08

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3

Same weakness CWE-787 – Out-of-bounds Write

View all
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2012-1889 HIGH POC
8.8
CVE-2010-3333 HIGH POC
7.8
CVE-2014-1761 HIGH POC
7.8
CVE-2009-3129 HIGH POC
7.8
CVE-2021-1732 HIGH POC
7.8
CVE-2013-3346 CRITICAL POC
9.8

Same technique Memory Corruption

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2014-0322 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-4792 HIGH POC
8.8
CVE-2010-3333 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: High
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed
SUSE Linux Enterprise Micro 5.3 Fixed

Share

CVE-2026-24193 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy