Chromium: CVE-2026-76042 Use of uninitialized resource in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-45199

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...

EUVD-2026-63810

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...

CVE-2026-45202

A flaw in Imagination GPU DDK's _FreeOSPages_Fast function fails to track state of upgraded higher-order CMA allocations, enabling a non-privileged user to trigger memory leaks or double frees via GPU syscalls, potentially causing kernel heap corruption. No exploit code or in-the-wild exploitatio...

EUVD-2026-63809

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

CVE-2026-45201

CVE-2026-45201 affects the Imagination Technologies GPU DDK (driver). The vulnerability resides in the PhysmemNewRamBackedPMR function, which performs improper validation of the log2 page size parameter during physical page allocation. A non-privileged user can issue crafted GPU system calls pass...

CVE-2026-45199

The rgxfw_to_ptr() function in Imagination's GPU DDK fails to validate firmware private data pointers, allowing Guest VM kernel software to trigger out-of-bounds memory writes via GPU firmware commands, enabling privilege escalation. Exploitation status is not provided. Reference: https://www.ima...

CVE-2026-45199 GPU DDK - rgxfw_to_ptr() does not reject FW private data pointers

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...

EUVD-2026-63811

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...

CVE-2026-13789

An use after free flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=493847920...

SUSE CVE-2026-76042

Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-79296

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...

PT-2026-79294

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...

PT-2026-79295

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

hashcrack

hashcrack extrait certains types de hachage, sélectionne des options judicieuses et invoque hashcat Pilotes NVIDIA ici : http://www.nvidia.co.uk/Download/index.aspx?lang=en-uk email alternatif : [email protected] si vous avez besoin d'assistance Je ne suis pas sûr que quelqu'un chez NCC...

vivo_iqoo_neo_9_root_research_on_CVE-2025-21479

Neo9Root iQOO Neo9 PD2338C 免解锁 Caps-Root 工具 — 基于 CVE-2025-21479 Adreno GPU SDS 的任意物理写提权方案 无需解锁 Bootloader、无需刷机、无需 Magisk。通过 GPU 漏洞获得内核级任意物理写 ，patch 内核关键函数后以全能力 41-bit caps 常驻 root daemon，为 rootc / su 提供 root 能力。 核心特性 ：euid 保持 2000 以绕过 vivo vr.ko 反 root 检测（euid=0 会触发设备重启），root 能力与 uid=0 等价但进程身份安全。...

CVE-2026-74453

A flaw was found in the Linux kernel's drm/vc4 component. The graphics driver's binner buffer object BO reuses memory slots without properly clearing the Tile State Data Array TSDA. This allows the hardware to process stale data from previous jobs, leading to the creation of invalid command strea...

CVE-2026-74450

A flaw was found in the Linux kernel's AMD GPU power management component. This vulnerability, known as a use-after-free, occurs when the system attempts to access memory that has already been released. A local attacker could potentially exploit this flaw to cause a system crash denial of service...

CVE-2026-74353

A flaw was found in the drm/amdkfd component of the Linux kernel. This vulnerability occurs when the system fails to properly resume all queues after a suspend operation, even if some suspend operations fail. An attacker could potentially exploit this by triggering a scenario where queue removal...

CVE-2026-74416

A flaw was found in the Linux kernel's drm/radeon component. When a Graphics Processing Unit GPU reset operation fails to acquire a necessary lock, a memory buffer is not properly released. Repeated occurrences of this issue can lead to a gradual depletion of kernel memory. This memory exhaustion...