Astra Linux – Vulnerability in Chromium

Integer overflow in the GPU in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.168, using free after in the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out-of-bounds memory write through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of after-free in GPUs in Google Chrome before version 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-54060 vulnerabilities

Vulnerabilities for packages: text-generation-inference, openstack-horizon-2025.2-fips, tensorflow-gpu-jupyter, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips, label-studio, openstack-horizon-2025.2, open-webui, openstack-horizon-2026.1, superset, mlflow...

CVE-2026-59200 vulnerabilities

Vulnerabilities for packages: text-generation-inference, openstack-horizon-2025.2-fips, tensorflow-gpu-jupyter, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips, label-studio, openstack-horizon-2025.2, open-webui, openstack-horizon-2026.1, superset, mlflow...

GHSA-62P4-GMF7-7G93 vulnerabilities

Vulnerabilities for packages: text-generation-inference, openstack-horizon-2025.2-fips, tensorflow-gpu-jupyter, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips, label-studio, openstack-horizon-2025.2, open-webui, openstack-horizon-2026.1, superset, mlflow...

CVE-2026-59199 vulnerabilities

Vulnerabilities for packages: text-generation-inference, openstack-horizon-2025.2-fips, tensorflow-gpu-jupyter, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips, label-studio, openstack-horizon-2025.2, open-webui, openstack-horizon-2026.1, superset, mlflow...

CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: text-generation-inference, openstack-horizon-2025.2-fips, tensorflow-gpu-jupyter, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips, label-studio, openstack-horizon-2025.2, open-webui, openstack-horizon-2026.1, superset, mlflow...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-16424

CVE-2026-16424 is a use-after-free vulnerability in the GPU component of Google Chrome on Android prior to version 150.0.7871.182. The description states a remote attacker who has compromised the renderer process could potentially cause a sandbox escape via a crafted HTML page. Connected sources ...

CVE-2026-45382

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...

CVE-2026-45383 libde265 has a heap buffer overflow (OOB read) in decode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 <= v1.0.18

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

CVE-2026-45383

CVE-2026-45383 affects libde265 prior to 1.0.19, where a heap-buffer-overflow can occur during HEVC WPP slice decoding. In decoder_context::decode_slice_unit_WPP(), ctbAddrRS is computed as ctbRow*ctbsWidth and, if PPS/SPS headers encode a value that exceeds pps.CtbAddrRStoTS.size(), an out-of-bo...

CVE-2026-45382

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, decodercontext::decodesliceunittiles libde265/decctx.cc:920 reads pps.CtbAddrRStoTSctbAddrRS at line 966 where ctbAddrRS = ctbY ctbsWidth + ctbX is computed from PPS-supplied colBd/rowBd arrays without...

EUVD-2026-41643

Gitea: Git LFS object reuse allows non-Code access to authorize private source objects...

SUSE CVE-2026-55238

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation phase, the parser did not perform sufficient length validation for specific capability sets. A remote, unauthenticated...

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit

A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no exploit and no break-in. That is the claim behind Bit2Watt , described by three Zhejiang University researchers in a paper accepted to CHES 202...

CVE-2026-64103

A flaw was found in the Linux kernel's ISCI IntelR C600 Series Chipset Storage Control Unit SCSI driver. This vulnerability occurs during device removal, where a timing issue can allow the system to attempt to use memory that has already been released. This 'use-after-free' condition could be...