CVE-2026-24191
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
The NVIDIA Display Driver for Windows has a time-of-check time-of-use vulnerability. Successful exploitation can lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.
Risk Assessment
An attacker can remotely or locally compromise system security, gaining unauthorized access and control over sensitive data.
Recommendation
Install the latest NVIDIA Display Driver for Windows from the vendor's website.
Other vulnerabilities in NVIDIA Display Driver
See all- CVE-2015-1170High
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a 'kernel administrator check,' which allows local users to gain administrator privileges via unspecified API calls.
- CVE-2026-24199Medium
The NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit might lead to denial of service.
- CVE-2026-24197Medium
NVIDIA Display Driver for Linux contains a vulnerability in Multi-Instance GPU (MIG) partition management, where insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration, resulting in denial of service.
- CVE-2026-24196High
NVIDIA Display Driver for Linux has an out-of-bounds read vulnerability. Successful exploitation may lead to denial of service and information disclosure.
- CVE-2026-24195High
NVIDIA Display Driver for Linux has a vulnerability in UVM, where a user can cause improper input validation. Successful exploitation might lead to denial of service.
- CVE-2026-24194High
The NVIDIA Display Driver for Linux has a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling. Successful exploitation might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
- CVE-2026-24193High
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
- CVE-2026-24192High
The NVIDIA Display Driver for Linux contains a vulnerability where an incorrect conversion between numeric types leads to a heap buffer overflow. Successful exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.
- CVE-2026-24190High
NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
- CVE-2026-24187High
The NVIDIA Display Driver for Linux contains a use-after-free vulnerability. Successful exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.
Original NVD description (English source)
NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.