CVE-2026-24200
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
NVIDIA vGPU software has a use-after-free vulnerability in the virtual GPU manager. Successful exploitation may lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.
Risk Assessment
An attacker could gain elevated privileges in the GPU virtualization environment, breaking VM isolation.
Recommendation
Update NVIDIA vGPU software to the patched version.
Other vulnerabilities in NVIDIA vGPU
See all- CVE-2026-47493High
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit might lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure.
- CVE-2026-24201Medium
NVIDIA vGPU software has a vulnerability in the virtual GPU manager that allows an attacker to cause an out-of-bound access. Successful exploitation could lead to data tampering, denial of service, or information disclosure.
Original NVD description (English source)
NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS