CVE-2026-13923

An uninitialized use flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511772034...

CVE-2026-14037

An insufficient policy enforcement flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496522611...

Confidential Computing on CPU and GPU Systems: How AI Data Centers Protect Data in Use

Modern AI runs on shared, high-performance infrastructure that processes enormous volumes of sensitive data and valuable model weights.…...

EUVD-2026-48534

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...

EUVD-2026-48532

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlyin...

Chromium: CVE-2026-16424 Use after free in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.216, reading data from the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of after-free in GPUs in Google Chrome before version 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.216, writing the GPU information in Google Chrome allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.168, using free after in the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out-of-bounds memory write through a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: text-generation-inference, openstack-horizon-2026.1-fips, mlflow, lmcache-cuda-12.8, openstack-horizon-2026.1, tritonserver-backend-vllm-cuda-13.0, label-studio, open-webui, openstack-horizon-2025.2, superset-fips, superset, tensorflow-gpu-jupyter,...

CVE-2026-59200 vulnerabilities

Vulnerabilities for packages: text-generation-inference, openstack-horizon-2026.1-fips, mlflow, lmcache-cuda-12.8, openstack-horizon-2026.1, tritonserver-backend-vllm-cuda-13.0, label-studio, open-webui, openstack-horizon-2025.2, superset-fips, superset, tensorflow-gpu-jupyter,...

CVE-2026-59199 vulnerabilities

Vulnerabilities for packages: text-generation-inference, openstack-horizon-2026.1-fips, mlflow, lmcache-cuda-12.8, openstack-horizon-2026.1, tritonserver-backend-vllm-cuda-13.0, label-studio, open-webui, openstack-horizon-2025.2, superset-fips, superset, tensorflow-gpu-jupyter,...

GHSA-62P4-GMF7-7G93 vulnerabilities

Vulnerabilities for packages: text-generation-inference, openstack-horizon-2026.1-fips, mlflow, lmcache-cuda-12.8, openstack-horizon-2026.1, tritonserver-backend-vllm-cuda-13.0, label-studio, open-webui, openstack-horizon-2025.2, superset-fips, superset, tensorflow-gpu-jupyter,...

CVE-2026-54060 vulnerabilities

Vulnerabilities for packages: text-generation-inference, openstack-horizon-2026.1-fips, mlflow, lmcache-cuda-12.8, openstack-horizon-2026.1, tritonserver-backend-vllm-cuda-13.0, label-studio, open-webui, openstack-horizon-2025.2, superset-fips, superset, tensorflow-gpu-jupyter,...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit

A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no exploit and no break-in. That is the claim behind Bit2Watt , described by three Zhejiang University researchers in a paper accepted to CHES 202...

KLA91166 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in WebAudio can be exploited remotely to cause denial of...