Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.216, reading data from the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

A stack buffer overflow in the GPU component of Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.216, writing the GPU information in Google Chrome allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Integer overflow in the GPU in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.168, using free after in the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out-of-bounds memory write through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of after-free in GPUs in Google Chrome before version 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of “after free” in GPUs in Google Chrome before version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Critical...

SUSE CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-54060 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, openstack-horizon-2026.1-fips, openstack-horizon-2025.2, superset, open-webui, mlflow, text-generation-inference, openstack-horizon-2025.2-fips, tritonserver-backend-vllm-cuda-13.0, superset-fips, openstack-horizon-2026.1, label-studio,...

CVE-2026-59200 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, openstack-horizon-2026.1-fips, openstack-horizon-2025.2, superset, open-webui, mlflow, text-generation-inference, openstack-horizon-2025.2-fips, tritonserver-backend-vllm-cuda-13.0, superset-fips, openstack-horizon-2026.1, label-studio,...

CVE-2026-59199 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, openstack-horizon-2026.1-fips, openstack-horizon-2025.2, superset, open-webui, mlflow, text-generation-inference, openstack-horizon-2025.2-fips, tritonserver-backend-vllm-cuda-13.0, superset-fips, openstack-horizon-2026.1, label-studio,...

GHSA-62P4-GMF7-7G93 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, openstack-horizon-2026.1-fips, openstack-horizon-2025.2, superset, open-webui, mlflow, text-generation-inference, openstack-horizon-2025.2-fips, tritonserver-backend-vllm-cuda-13.0, superset-fips, openstack-horizon-2026.1, label-studio,...

CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, openstack-horizon-2026.1-fips, openstack-horizon-2025.2, superset, open-webui, mlflow, text-generation-inference, openstack-horizon-2025.2-fips, tritonserver-backend-vllm-cuda-13.0, superset-fips, openstack-horizon-2026.1, label-studio,...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit

A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no exploit and no break-in. That is the claim behind Bit2Watt , described by three Zhejiang University researchers in a paper accepted to CHES 202...

CVE-2026-15900

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit CPU resources. This leads to...

CVE-2026-63859

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add missing bits in airohaqdmacleanuptxqueue Similar to airohaqdmacleanuprxqueue, reset DMA TX descriptors in airohaqdmacleanuptxqueue routine. Moreover, reset TXDMAIDX to TXCPUIDX to notify the NIC the QDMA TX ring ...

CVE-2026-53377

In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu Previously, in case there was no more work to do, recover worker wouldn't trigger recovery and would instead rely on the gpu going to sleep and then resuming when more work is submitted...