Executive brief
NVIDIA has addressed a security vulnerability in its display drivers for Windows and Linux systems. These drivers are essential software components that allow the operating system to communicate with the computer's graphics hardware. If exploited, this flaw could allow a local user to gain higher system privileges, access sensitive information, or cause the system to crash, potentially leading to a full system takeover.
Technical details
An out-of-bounds write vulnerability (CWE-787) exists in the NVIDIA Display Driver for both Windows and Linux. The flaw occurs when the driver writes data past the end of an intended buffer, which can be triggered by a local attacker with low privileges. Successful exploitation can result in arbitrary code execution in the context of the kernel, unauthorized escalation of privileges, information disclosure, or a system-wide denial of service (BSOD/Kernel Panic). The vulnerability is tracked as CVE-2026-24193 and carries a CVSS v3.1 base score of 7.8.
Affected products
- NVIDIA Display Driver Windows and Linux versions
Timeline
- 2026-05-26: disclosed: Initial publication of the CVE record.
- 2026-05-26: advisory