PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-24193 NVIDIA CVE debrief

NVIDIA Display Driver for Windows and Linux contains an out-of-bounds write vulnerability (CWE-787) with a CVSS 3.1 score of 7.8 (HIGH). The vulnerability was published to the NVD on 2026-05-26 and is currently undergoing analysis. A successful exploit could result in denial of service, privilege escalation, information disclosure, data tampering, or code execution. The attack vector is local (AV:L) with low attack complexity (AC:L) and low privileges required (PR:L), requiring no user interaction (UI:N). The confidentiality, integrity, and availability impacts are all rated HIGH. NVIDIA has published security guidance via their customer help portal. Organizations using affected NVIDIA Display Driver versions on Windows or Linux should monitor for vendor security updates and apply patches when available.

Vendor
NVIDIA
Product
GeForce
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-26
Original CVE updated
2026-06-11
Advisory published
2026-05-26
Advisory updated
2026-06-11

Who should care

Organizations running NVIDIA Display Driver on Windows or Linux workstations and servers; security teams managing endpoint and server graphics driver deployments; compliance teams tracking high-severity local privilege escalation vulnerabilities.

Technical summary

Out-of-bounds write in NVIDIA Display Driver for Windows and Linux. Local attack vector with low complexity. Successful exploitation may lead to code execution, privilege escalation, denial of service, information disclosure, or data tampering. CVSS 3.1: 7.8 (HIGH).

Defensive priority

high

Recommended defensive actions

  • Monitor NVIDIA security advisories for affected driver versions and patch availability
  • Apply NVIDIA Display Driver security updates when released by the vendor
  • Review systems with NVIDIA Display Driver installed on Windows and Linux for exposure
  • Implement principle of least privilege to limit local attack vector exploitation
  • Monitor for anomalous activity related to NVIDIA driver processes

Evidence notes

Source references confirm NVIDIA as the vendor and NVIDIA Display Driver as the affected product. CVSS vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H sourced from NVD record. Weakness classification CWE-787 from [email protected].

Sources and references

Verified primary and authoritative sources

  • CVE-2026-24193 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-24193

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-24193 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-24193

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.