CVE-2026-24201
Quick assessment
Affected
NVIDIA Virtual GPU Manager
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NVIDIA vGPU Software是美国英伟达（NVIDIA）公司的一个用于为虚拟机提供GPU功能的管理软件。该软件支持多个虚拟机访问主机的GPU，为虚拟机提供图形性能和应用程序兼容性。 NVIDIA vGPU Software存在缓冲区错误漏洞，该漏洞源于虚拟GPU管理器中攻击者可能导致越界访问，可能导致数据篡改、拒绝服务或信息泄露。
Possible ATT&CK Techniques 3 AI
T1083 · File and Directory Discovery T1499 · Endpoint Denial of Service T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 6
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager | 595.58.02(All versions up to and including the March 2026 release) |
affected |
595.58.02(All versions prior to and including vGPU 20.0) |
affected | ||
580.126.08(All versions prior to and including vGPU 19.4) |
affected | ||
535.288.01(All versions prior to and including vGPU 16.13) |
affected | ||
595.94(All versions prior to and including vGPU 20.0) |
affected | ||
582.16(All versions prior to and including vGPU 19.4) |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-24201
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successful exploit of this vulnerability might lead to data tampering, denial of service, or information disclosure.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Vulnerability Title
NVIDIA vGPU Software 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NVIDIA vGPU Software是美国英伟达（NVIDIA）公司的一个用于为虚拟机提供GPU功能的管理软件。该软件支持多个虚拟机访问主机的GPU，为虚拟机提供图形性能和应用程序兼容性。 NVIDIA vGPU Software存在缓冲区错误漏洞，该漏洞源于虚拟GPU管理器中攻击者可能导致越界访问，可能导致数据篡改、拒绝服务或信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| NVIDIA | Virtual GPU Manager | 595.58.02(All versions up to and including the March 2026 release) | - |
|
| NVIDIA | Virtual GPU Manager | 595.58.02(All versions prior to and including vGPU 20.0) | - |
|
| NVIDIA | Virtual GPU Manager | 580.126.08(All versions prior to and including vGPU 19.4) | - |
|
| NVIDIA | Virtual GPU Manager | 535.288.01(All versions prior to and including vGPU 16.13) | - |
|
| NVIDIA | Virtual GPU Manager | 595.94(All versions prior to and including vGPU 20.0) | - |
|
| NVIDIA | Virtual GPU Manager | 582.16(All versions prior to and including vGPU 19.4) | - |
|
II. Public POCs for CVE-2026-24201
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-24201
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-24201 (2)
Same Patch Batch · NVIDIA · 2026-05-26 · 17 CVEs total
| CVE-2026-24187 | 8.8 HIGH | NVIDIA Display Driver for Linux 资源管理错误漏洞 |
| CVE-2026-24162 | 7.8 HIGH | NVIDIA Transformers4Rec 代码问题漏洞 |
| CVE-2026-24192 | 7.8 HIGH | NVIDIA Display Driver 安全漏洞 |
| CVE-2026-24193 | 7.8 HIGH | NVIDIA Display Driver 缓冲区错误漏洞 |
| CVE-2026-24190 | 7.8 HIGH | NVIDIA Display Driver 安全漏洞 |
| CVE-2026-24191 | 7.8 HIGH | NVIDIA Display Driver 安全漏洞 |
| CVE-2026-24194 | 7.8 HIGH | NVIDIA Display Driver for Linux 安全漏洞 |
| CVE-2026-24212 | 7.5 HIGH | NVIDIA Isaac Launchable 安全漏洞 |
| CVE-2026-24195 | 7.1 HIGH | NVIDIA Display Driver 输入验证错误漏洞 |
| CVE-2026-24196 | 7.1 HIGH | NVIDIA Display Driver for Linux 缓冲区错误漏洞 |
| CVE-2026-24200 | 7.0 HIGH | NVIDIA vGPU Software 资源管理错误漏洞 |
| CVE-2026-24182 | 6.5 MEDIUM | NVIDIA Display Driver 安全漏洞 |
| CVE-2026-24197 | 6.5 MEDIUM | NVIDIA Display Driver for Linux 安全漏洞 |
| CVE-2026-24198 | 5.6 MEDIUM | NVIDIA GPU Display Driver 信息泄露漏洞 |
| CVE-2026-24199 | 4.7 MEDIUM | NVIDIA Display Driver 竞争条件问题漏洞 |
| CVE-2025-33221 | 4.4 MEDIUM | NVIDIA Display Driver 输入验证错误漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-24201
No comments yet