CVE-2026-13923

An uninitialized use flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511772034...

CVE-2026-14037

An insufficient policy enforcement flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496522611...

Confidential Computing on CPU and GPU Systems: How AI Data Centers Protect Data in Use

Modern AI runs on shared, high-performance infrastructure that processes enormous volumes of sensitive data and valuable model weights.…...

EUVD-2026-48534

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...

EUVD-2026-48532

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlyin...

Chromium: CVE-2026-16424 Use after free in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.216, writing the GPU information in Google Chrome allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.216, reading data from the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of after-free in GPUs in Google Chrome before version 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.168, using free after in the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out-of-bounds memory write through a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-54060 vulnerabilities

Vulnerabilities for packages: mlflow, tensorflow-gpu-jupyter, openstack-horizon-2025.2, openstack-horizon-2025.2-fips, superset, open-webui, lmcache-cuda-12.8, openstack-horizon-2026.1, text-generation-inference, label-studio, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips,...

CVE-2026-59199 vulnerabilities

Vulnerabilities for packages: mlflow, tensorflow-gpu-jupyter, openstack-horizon-2025.2, openstack-horizon-2025.2-fips, superset, open-webui, lmcache-cuda-12.8, openstack-horizon-2026.1, text-generation-inference, label-studio, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips,...

CVE-2026-59200 vulnerabilities

Vulnerabilities for packages: mlflow, tensorflow-gpu-jupyter, openstack-horizon-2025.2, openstack-horizon-2025.2-fips, superset, open-webui, lmcache-cuda-12.8, openstack-horizon-2026.1, text-generation-inference, label-studio, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips,...

GHSA-62P4-GMF7-7G93 vulnerabilities

Vulnerabilities for packages: mlflow, tensorflow-gpu-jupyter, openstack-horizon-2025.2, openstack-horizon-2025.2-fips, superset, open-webui, lmcache-cuda-12.8, openstack-horizon-2026.1, text-generation-inference, label-studio, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips,...

CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: mlflow, tensorflow-gpu-jupyter, openstack-horizon-2025.2, openstack-horizon-2025.2-fips, superset, open-webui, lmcache-cuda-12.8, openstack-horizon-2026.1, text-generation-inference, label-studio, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips,...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit

A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no exploit and no break-in. That is the claim behind Bit2Watt , described by three Zhejiang University researchers in a paper accepted to CHES 202...

ROS-20260721-73-0040

The vulnerability of the graphics processing units in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious actor to bypass the sandboxing protection mechanisms...