PT-2026-64421

Name of the Vulnerable Software and Affected Versions GPU DDK affected versions not specified Description An integer overflow occurs during the calculation of physical offsets for sparse PMRs Partial Memory Regions within the PMRLogicalOffsetToPhysicalOffset function. For PMRs larger than 4 GB,...

Astra Linux – Vulnerability in Chromium

A stack buffer overflow in the GPU component of Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

The use of “after free” in GPUs in Google Chrome before version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

Integer overflow in the GPU in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-54060 vulnerabilities

Vulnerabilities for packages: open-webui, label-studio, superset, openstack-horizon-2026.1-fips, openstack-horizon-2026.1, superset-fips, mlflow, openstack-horizon-2025.2, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, text-generation-inference, tensorflow-gpu-jupyter,...

CVE-2026-59200 vulnerabilities

Vulnerabilities for packages: open-webui, label-studio, superset, openstack-horizon-2026.1-fips, openstack-horizon-2026.1, superset-fips, mlflow, openstack-horizon-2025.2, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, text-generation-inference, tensorflow-gpu-jupyter,...

CVE-2026-59199 vulnerabilities

Vulnerabilities for packages: open-webui, label-studio, superset, openstack-horizon-2026.1-fips, openstack-horizon-2026.1, superset-fips, mlflow, openstack-horizon-2025.2, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, text-generation-inference, tensorflow-gpu-jupyter,...

CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: open-webui, label-studio, superset, openstack-horizon-2026.1-fips, openstack-horizon-2026.1, superset-fips, mlflow, openstack-horizon-2025.2, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, text-generation-inference, tensorflow-gpu-jupyter,...

GHSA-62P4-GMF7-7G93 vulnerabilities

Vulnerabilities for packages: open-webui, label-studio, superset, openstack-horizon-2026.1-fips, openstack-horizon-2026.1, superset-fips, mlflow, openstack-horizon-2025.2, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, text-generation-inference, tensorflow-gpu-jupyter,...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-16424

CVE-2026-16424 is a use-after-free vulnerability in the GPU component of Google Chrome on Android prior to version 150.0.7871.182. The description states a remote attacker who has compromised the renderer process could potentially cause a sandbox escape via a crafted HTML page. Connected sources ...

CVE-2026-45382

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...

CVE-2026-45383

CVE-2026-45383 affects libde265 prior to 1.0.19, where a heap-buffer-overflow can occur during HEVC WPP slice decoding. In decoder_context::decode_slice_unit_WPP(), ctbAddrRS is computed as ctbRow*ctbsWidth and, if PPS/SPS headers encode a value that exceeds pps.CtbAddrRStoTS.size(), an out-of-bo...

CVE-2026-45383 libde265 has a heap buffer overflow (OOB read) in decode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 <= v1.0.18

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

CVE-2026-45382

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...

EUVD-2026-41643

Gitea: Git LFS object reuse allows non-Code access to authorize private source objects...

SUSE CVE-2026-55238

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation phase, the parser did not perform sufficient length validation for specific capability sets. A remote, unauthenticated...

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit

A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no exploit and no break-in. That is the claim behind Bit2Watt , described by three Zhejiang University researchers in a paper accepted to CHES 202...