NVIDIA Display Driver DoS

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insufficient control over input data. Exploiting this vulnerability can allow attackers to cause system failures...

ROS-20260914-73-0008

The vulnerability of the Google Chrome browser’s graphics processor is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to access confidential information through a specially created HTML page...

Qualcomm KGSL Driver Privilege Escalation

The vulnerability of the KGSL driver for graphics processors in Qualcomm’s embedded software lies in the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to elevate their privileges to root level and execute arbitrary code...

CVE-2026-68237 drm/amdgpu/userq: fix indefinite fence wait during GPU reset

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset prereset only force-completes fences of MAPPED queues. A queue in any other state e.g. mid-eviction keeps its lastfence pending; after a GPU reset that fence never...

CVE-2026-19148

Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-19148

Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

GPU components DoS

The vulnerability of the GPU components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

CVE-2026-17746

Use after free in GPU in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17746

Use after free in GPU in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-17763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in GPU in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak...

CVE-2026-16280 GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset

An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in...

CVE-2026-49745

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...

ROS-20260724-73-0008

The vulnerability of the Google Chrome browser’s graphics processor is related to memory writes beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to bypass the sandboxing protection mechanisms...

Astra Linux – vulnerability in Chromium

In Google Chrome GPUs using “after free” prior to version 148.0.7778.168, a remote attacker could execute arbitrary code within a sandbox by using a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

The uninitialized use of GPU in Google Chrome prior to version 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

GHSA-4X4J-2G7C-83W6 vulnerabilities

Vulnerabilities for packages: text-generation-inference, openstack-horizon-2026.1, mlflow, superset-fips, openstack-horizon-2025.2, openstack-horizon-2026.1-fips, superset, tritonserver-backend-vllm-cuda-13.0, tensorflow-gpu-jupyter, label-studio, open-webui, openstack-horizon-2025.2-fips,...

CVE-2026-16424

A use after free vulnerability in the GPU component of Google Chrome on Android (prior to version 150.0.7871.182) allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. This vulnerability is also present in Micros...

SUSE CVE-2026-53377

In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu Previously, in case there was no more work to do, recover worker wouldn't trigger recovery and would instead rely on the gpu going to sleep and then resuming when more work is submitted...

ROS-20260720-73-0055

The vulnerability of the Google Chrome browser’s graphics processor is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20260720-73-0030

The vulnerability of the Google Chrome browser’s graphics processor is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to bypass the sandboxing protection mechanisms...