CVE-2026-24201
MediumCVSS 5.8Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
NVIDIA vGPU software has a vulnerability in the virtual GPU manager that allows an attacker to cause an out-of-bound access. Successful exploitation could lead to data tampering, denial of service, or information disclosure.
Risk Assessment
Risk includes potential data manipulation, service disruptions, and leakage of sensitive information in environments using GPU virtualization.
Recommendation
Immediately update NVIDIA vGPU software to the latest patched version.
Other vulnerabilities in NVIDIA vGPU
See all- CVE-2026-47493High
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit might lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure.
- CVE-2026-24200High
NVIDIA vGPU software has a use-after-free vulnerability in the virtual GPU manager. Successful exploitation may lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.
Original NVD description (English source)
NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successful exploit of this vulnerability might lead to data tampering, denial of service, or information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS