rainbutterfly/cve_corpus huggingface dataset:
CVE-2026-24177 
NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization. A successful exploit of this vulnerability might lead to information disclosure.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: NVIDIA
product: KAI Scheduler
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseSeverity: HIGH
baseScore: 7.7
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Published: 2026-04-21T16:17:26.431Z
CVE-2026-24178 
NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information disclosure, code execution, and denial of service.
Problem types: cwe_id: CWE-639
description: CWE-639 Authorization Bypass Through User-Controlled Key
Affected products: vendor: NVIDIA
product: FLARE SDK
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published: 2026-04-28T17:44:51.538Z
CVE-2026-24182 
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks. A successful exploit of this vulnerability might lead to denial of service.
Problem types: cwe_id: CWE-667
description: CWE-667 Improper Locking
Affected products: vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Published: 2026-05-26T17:16:42.147Z
CVE-2026-24186 
NVIDIA FLARE SDK  contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerability might lead to code execution.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: NVIDIA
product: FLARE SDK
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2026-04-28T17:45:40.517Z
CVE-2026-24187 
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
Problem types: cwe_id: CWE-416
description: CWE-416 Use After Free
Affected products: vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published: 2026-05-26T17:12:42.081Z
CVE-2026-24188 
NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to data tampering.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: NVIDIA
product: TensorRT
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: LOW
baseSeverity: HIGH
baseScore: 8.2
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Published: 2026-05-20T17:41:11.138Z
CVE-2026-24189 
NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliciously crafted request. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: NVIDIA
product: CUDA-Q
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 8.2
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Published: 2026-04-21T16:17:54.323Z
CVE-2026-24190 
NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2026-05-26T17:22:41.269Z
CVE-2026-24191 
NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
Problem types: cwe_id: CWE-367
description: CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products: vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Published: 2026-05-26T17:23:25.753Z
CVE-2026-24192 
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer overflow. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
Problem types: cwe_id: CWE-681
description: CWE-681 Incorrect Conversion between Numeric Types
Affected products: vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2026-05-26T17:14:31.794Z
CVE-2026-24193 
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2026-05-26T17:21:42.334Z
CVE-2026-24194 
NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
Problem types: cwe_id: CWE-281
description: CWE-281 Improper Preservation of Permissions
Affected products: vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2026-05-26T17:24:13.664Z
CVE-2026-24195 
NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit of this vulnerability might lead to denial of service.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Published: 2026-05-26T17:15:30.817Z
CVE-2026-24196 
NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Published: 2026-05-26T17:20:25.479Z
CVE-2026-24197 
NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this vulnerability might lead to denial of service.
Problem types: cwe_id: CWE-1188
description: CWE-1188 Initialization of a Resource with an Insecure Default
Affected products: vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Published: 2026-05-26T17:19:40.408Z
CVE-2026-24198 
NVIDIA GPU Display Driver for Linux  contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memory, which might cause limited exposure of sensitive information to an unauthorized actor. A successful exploit of this vulnerability might lead to denial of service, data tampering, and information disclosure.
Problem types: cwe_id: CWE-200
description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: HIGH
baseSeverity: MEDIUM
baseScore: 5.6
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
Published: 2026-05-26T17:17:54.052Z
CVE-2026-24199 
NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service.
Problem types: cwe_id: CWE-362
description: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products: vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: GeForce
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: NVIDIA RTX, Quadro, NVS
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Tesla
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Guest driver
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
baseSeverity: MEDIUM
baseScore: 4.7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Published: 2026-05-26T17:18:50.759Z
CVE-2026-24200 
NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
Problem types: cwe_id: CWE-416
description: CWE-416 Use After Free
Affected products: vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
vendor: NVIDIA
product: Virtual GPU Manager
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2026-05-26T17:24:48.456Z