CVE-2026-113188

Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113188

A memory corruption vulnerability in the GPU component of Google Chrome (prior to version 156.0.8078.47) allows a remote attacker to potentially execute arbitrary code inside the sandbox. This vulnerability can be triggered via a crafted HTML page . Remediation is available in Chrome version 156....

CVE-2026-113188

Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113188

Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-98608

A flaw was found in the Linux kernel's VirtIO GPU graphics processing unit driver. When handling resource creation requests, an improper error-handling path fails to release acquired object references upon failure, causing memory and system resources to leak. A local user could exploit this flaw ...

CVE-2026-98609

A flaw was found in the Linux kernel's VirtIO GPU driver. When graphics buffer handle creation fails, the driver improperly handles object references, preventing cleanup functions from freeing allocated memory and host resources. A local attacker could exploit this vulnerability to trigger a...

CVE-2026-89812

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver. When the Multimedia Engine Scheduler MES ring stops responding and a system reset is triggered, the MES ring fences are not properly completed. This can lead to the system becoming unresponsive after resuming from the...

CVE-2026-98607

A flaw was found in the Linux kernel's VirtIO GPU driver. This vulnerability allows a local user to cause a denial of service DoS through memory and resource exhaustion. When errors occur during the creation of graphical resources, the driver fails to properly release object references, preventin...

CVE-2026-98606

A flaw was found in the Linux kernel's VirtIO GPU driver. During error handling when creating video memory resources, the driver deallocates memory without properly releasing the object from kernel memory tracking structures. A local user can exploit this vulnerability to trigger a use-after-free...

CVE-2026-93180

A flaw was found in the panthor component of the Linux kernel. A local attacker could exploit this vulnerability by performing a partial unmap of an evicted Buffer Object BO when the Graphics Processing Unit GPU mapping is split. This occurs because the logic for handling partial unmap of huge...

CVE-2026-93177

A flaw was found in the Linux kernel's AMD GPU powerplay module. This vulnerability arises from missing bounds checks when processing voltage indices from VBIOS-parsed tables. An attacker could potentially exploit this by providing specially crafted VBIOS data, leading to an out-of-bounds read...

CVE-2026-93061

A flaw was found in the Linux kernel's graphics processing unit GPU host1x debug output. This vulnerability, a type of memory corruption, could allow a local attacker with access to debug files to read beyond the allocated memory buffer. This could potentially lead to information disclosure or...

CVE-2026-93060

A flaw was found in the Linux kernel's Adreno GPU driver. This use-after-free vulnerability occurs in the a6xxgpuinit function. Specifically, the a6xxdestroy function frees the a6xxgpu memory, but adrenogpu continues to point to the freed memory. An attacker could potentially exploit this to caus...

CVE-2026-98566

A flaw was found in the Linux kernel's drm/imagination GPU driver. The driver fails to properly validate and bound the firmware reconstruction count against the fixed protocol array capacity when processing freelist reconstruction requests. A local attacker could exploit this vulnerability by...

PT-2026-119001

Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-118820

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description A use after free issue in the GPU component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use after...

PT-2026-118885

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption occurs in the GPU component, which could allow a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML...

PT-2026-119021

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description A use after free issue exists in the GPU component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker...

PT-2026-118709

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in the GPU component allows a remote attacker to potentially execute arbitrary code inside the sandbox by inducing the user to visit a crafted HTML page...

PT-2026-119029

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption occurs in the GPU component, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page...