Lucene search
+L

8656 matches found

OSV
OSV
added 2026/07/15 5:00 p.m.9 views

CVE-2026-58658 GPUStack Unauthenticated Information Disclosure via Worker Endpoints

GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to access sensitive inference logs and modify worker configuration by exploiting unprotected /serveLogs and /debug endpoints on the worker port...

8.8CVSS6.1AI score
SaveExploits0References6
CVE
CVE
added 2026/07/15 5:00 p.m.46 views

CVE-2026-58658

Summary. CVE-2026-58658 affects GPUStack up to version 2.2.1 and was fixed by commit 4e20551. An unauthenticated attacker can abuse unprotected /serveLogs and /debug endpoints on the worker port to disclose sensitive information and configure logs. Specifically, attackers can enumerate model inst...

8.8CVSS6.1AI score0.00535EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/15 12:00 a.m.42 views

PT-2026-60247

GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to access sensitive inference logs and modify worker configuration by exploiting unprotected /serveLogs and /debug endpoints on the worker port...

8.8CVSS6.1AI score0.00535EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/14 9:16 p.m.17 views

CVE-2026-15772

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS0.00304EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/14 9:16 p.m.19 views

DEBIAN-CVE-2026-15772

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS6.2AI score0.00304EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/07/14 8:09 p.m.18 views

CVE-2026-15772

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.4AI score0.00304EPSS
SaveExploits0
CVE
CVE
added 2026/07/14 8:09 p.m.42 views

CVE-2026-15772

The CVE-2026-15772 entry describes a Use-After-Free in the GPU component of Google Chrome on Android prior to version 150.0.7871.125, which could allow a remote attacker who already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The issue is classified...

8.3CVSS6.2AI score0.00304EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/14 8:09 p.m.12 views

CVE-2026-24271

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A successful exploit of this vulnerability might lead to denial of service...

6.2CVSS6.1AI score0.0016EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/14 8:09 p.m.50 views

CVE-2026-24271

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A successful exploit of this vulnerability might lead to denial of service...

6.2CVSS0.0016EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.25 views

PT-2026-58735

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.125 Description A use after free issue in the GPU component allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This is achiev...

8.3CVSS6.1AI score0.00304EPSS
SaveExploits0References20
Kaspersky
Kaspersky
added 2026/07/14 12:00 a.m.43 views

KLA91140 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Ozone can be exploited...

9.6CVSS7.2AI score0.00451EPSS
SaveExploits1References2
OSV
OSV
added 2026/07/13 3:46 p.m.14 views

PYSEC-2026-3405 vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels

Summary All temperature validation gates use comparison operators , which silently evaluate to False for NaN and for positive Infinity in Python's IEEE 754 float semantics. Both values pass every guard and propagate to GPU sampling kernels, where they produce undefined behavior or CUDA errors tha...

6.9CVSS6.2AI score0.0045EPSS
SaveExploits1References7
SUSE Linux
SUSE Linux
added 2026/07/13 2:56 p.m.16 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype bsc1259891. CVE-2026-23451: bonding:...

9.3CVSS6.9AI score0.00583EPSS
SaveExploits14References260
OSV
OSV
added 2026/07/13 2:19 p.m.8 views

PYSEC-2026-3288 FPE in `tf.image.generate_bounding_box_proposals`

Impact When running on GPU, tf.image.generateboundingboxproposals receives a scores input that must be of rank 4 but is not checked. python import tensorflow as tf a = tf.constantvalue=1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0 b = tf.constantvalue=1...

4.8CVSS6.9AI score0.00439EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2026/07/13 12:00 a.m.20 views

The vulnerability of the amdgpupciSlotReset() function in the driver/gpu/drm/amd/amdgpu/amdgpu_device.c file of the Linux operating system’s graphics driver module allows a malicious actor to cause a service failure.

The vulnerability of the amdgpupciSlotReset function in the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c source code of the DRI support module for AMD GPU cores in Linux operating systems is related to the execution of a loop without sufficient restrictions on its execution count. Exploiting this...

5.5CVSS6.8AI score0.00195EPSS
SaveExploits0References8Affected Software5
Microsoft CVE
Microsoft CVE
added 2026/07/11 10:41 p.m.17 views

Chromium: CVE-2026-13923 Uninitialized Use in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS6.1AI score0.00347EPSS
SaveExploits0
NVD
NVD
added 2026/07/10 9:16 p.m.17 views

CVE-2026-45203

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of memory for the host kernel. A TOCTOU bug existed where a malicious driver could modify values in memory after firmware validation but befo...

7.8CVSS0.00125EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/10 9:16 p.m.22 views

CVE-2026-34196

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical address. One of these virutal mappings can be freed along with the physical page, allowing for a read/write UAF via the...

7.8CVSS0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/10 8:57 p.m.50 views

CVE-2026-45203 GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOU

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of memory for the host kernel. A TOCTOU bug existed where a malicious driver could modify values in memory after firmware validation but befo...

0.00125EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/10 8:57 p.m.19 views

EUVD-2026-43043

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of memory for the host kernel. A TOCTOU bug existed where a malicious driver could modify values in memory after firmware validation but befo...

6.1AI score0.00125EPSS
SaveExploits0References1
Rows per page
Query Builder