CVE-2026-24191

Summary

NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

Affected Software

VendorProductVersion RangeStatus
NVIDIAGeForceAll driver versions prior to 596.36affected
NVIDIAGeForceAll driver versions prior to 582.53 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.affected
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 596.36affected
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 582.53affected
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 539.72affected
NVIDIATeslaAll driver versions prior to 596.36affected
NVIDIATeslaAll driver versions prior to 582.53affected
NVIDIATeslaAll driver versions prior to 539.72affected
NVIDIAGuest driver595.97(All versions prior to and including vGPU 20.0)affected
NVIDIAGuest driver582.16(All versions prior to and including vGPU 19.4)affected
NVIDIAGuest driver539.64(All versions prior to and including vGPU 16.13)affected
NVIDIAVirtual GPU Manager595.94(All versions prior to and including vGPU 20.0)affected
NVIDIAVirtual GPU Manager582.16(All versions prior to and including vGPU 19.4)affected

Weaknesses

  • CWE-367: CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References