NVIDIA fixes 14 vulnerabilities in its drivers for Windows and Linux
The manufacturers of GPUs They release drivers often to add new graphic functions, make new games compatible with their technologies and correct bugs, among others. But drivers can also offer other less known options, such as fixing security issues. NVIDIA has published a new security bulletinin which it advises us to install the latest drivers to correct some detected vulnerabilities and offer greater security to your system.
Of a total of 14 vulnerabilities fixedmore than half are classified as a high security risk. The vulnerabilities would allow attackers to perform such well-known actions as “denial of service, escalation of privilege, information disclosure, data manipulation and code execution”. Some with a base score as high as 8.8while the majority presents a 7.8 on the scale. These are:
NVIDIA fixes high and medium severity vulnerabilities in Windows and Linux
Fixed vulnerabilities in NVIDIA drivers for Windows and Linux
High severity issues
- CVE-2026-24187 (Linux)
Fixed a bug that could cause improper use of freed memory (use-after-free). This could allow system crashes, privilege escalation, access to sensitive information, data manipulation or even malicious code execution. - CVE-2026-24190 (Windows and Linux)
Fixed a problem in driver kernel layerwhere a user could incorrectly access resources from the GPU. The failure could lead to crashes, information leaks, data alteration or code execution. - CVE-2026-24191 (Windows)
NVIDIA has patched an issue related to a condition TOCTOU (Time-of-Check Time-of-Use)which could open the door to privilege escalation, data manipulation or denial of service. - CVE-2026-24192 (Linux)
Fixed a bug in the conversion of numeric types that could cause a heap buffer overflowcompromising the stability and security of the system. - CVE-2026-24193 (Windows and Linux)
Fixed a bug out-of-bounds writewith possible consequences such as system crashes, data access or unauthorized code execution. - CVE-2026-24194 and CVE-2026-24195 (Linux)
Two vulnerabilities detected in Unified Virtual Memory (UVM) related to a incorrect input validationwhich could lead to denial of service. - CVE-2026-24196 (Linux)
NVIDIA has fixed a bug reading out of memory limitswhich could cause information leaks and system crashes.
Medium severity issues
- CVE-2026-24182 (Windows and Linux)
Fixed an issue related to Improperly retained driver lockswhich could end up causing instability or denial of service. - CVE-2026-24197 (Linux)
Fixed a bug in partition management MIG (Multi-Instance GPU)where insecure initialization could cause data corruption or crashes during reconfiguration. - CVE-2026-24198 (Linux)
Fixed a race condition which could allow an advanced attacker filter sensitive memoryexposing certain system information. - CVE-2026-24199 (Linux)
NVIDIA It has also solved another problem race condition in a kernel modulewhich could cause denial of service. - CVE-2025-33221 (Windows and Linux)
Fixed a bug in the kernel driver related to incorrect assignment of permissions for critical resources, which could facilitate data manipulation and system crashes.
NVIDIA has also fixed bugs in its vGPU software
Vulnerabilities Fixed in NVIDIA vGPU Software
- CVE-2026-24200
NVIDIA Fixed a problem in the manager Virtual GPUs (vGPU) related to a improper use of freed memorywhich could lead to privilege escalation, data leak, or code execution. - CVE-2026-24201
Fixed a bug out of bounds accesswith risk of data corruption, information leak or denial of service.
NVIDIA recommends installing drivers 596.36 or higher
In order to solve these security flaws, NVIDIA advises us to install the latest version of the drivers, the version R595 or higher. NVIDIA has cataloged the version R595 like the 596.36 or highercurrently being the 596.49 the most recent one published a few days ago. If you have the last installed driver you don’t need to do anything else.
If you do not have it updated, for greater security it would be ideal download the drivers from the manufacturer’s official websiteor update them directly from the NVIDIA app.
Juan Antonio Soto
I am a Computer Engineer and my specialty is automation and robotics. My passion for hardware began at the age of 14 when I broke down my first computer: a 386 DX 40 with 4MB of RAM and 210MB of hard drive. I continue to give free rein to my passion in the technical articles I write for Geeknetic. I dedicate most of my free time to video games, contemporary and retro, on the more than 20 consoles I have, in addition to the PC.
