PT-2026-102535

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Thunderbird versions prior to 157 Description A use-after-free issue exists in the Graphics: WebGPU component, which can lead to privilege escalation. Use-after-free is a memory corruption flaw that occurs when an...

PT-2026-102538

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 157 Firefox versions prior to 157 Description Incorrect boundary conditions in the Graphics: WebGPU component allow for privilege escalation. Recommendations Update Thunderbird to version 157. Update Firefox to...

PT-2026-102537

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Thunderbird versions prior to 157 Description Incorrect boundary conditions exist within the Graphics: WebGPU component. WebGPU is a modern API that provides high-performance graphics and compute capabilities to w...

rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-android

CVE-2026-76036 — Стенд обнаружения ошибок мипмапов NPOT depth/stencil в Dawn WebGPU Критическое CVSS 9.6, CWE-122 переполнение буфера в куче в Dawn , реализации WebGPU в Chromium, в Google Chrome на Android до версии 151.0.7922.169 стабильная версия 151, выпущена 2026-08-18. Корневая причина,...

CVE-2026-43700

CVE-2026-43700 WebKit WebGPU importExternalTexture fuite d'informations cross-origin. Safari rouge/vert/bleu/blanc Version corrigée = 26.5.2 : PATCHED importExternalTexture blocked: SecurityError Principe GPUDevice.importExternalTexturesource: HTMLVideoElement importe la vidéo en tant que...

CVE-2026-84130

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: WebGPU component...

CVE-2026-84123

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to use-after-free in the Graphics: WebGPU component...

EulerOS Virtualization 2.11.0 : mesa (EulerOS-SA-2026-3527)

According to the versions of the mesa packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated dat...

EulerOS Virtualization 2.11.1 : mesa (EulerOS-SA-2026-3440)

According to the versions of the mesa packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated dat...

Astra Linux – Vulnerability in Mesa

In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of data to be allocated depends on an untrusted party, and this data is then used for the alloca function...

Astra Linux – Vulnerability in Firefox

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

Astra Linux – Vulnerability in Firefox

Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152...

Astra Linux – Vulnerability in Chromium

A out-of-bounds read in WebGPU using Google Chrome before version 149.0.7827.53 allowed a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 94.0.4606.54, using "after free" in WebGPU with Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of after-free in WebGPU within Google Chrome before version 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in WebGPU in Google Chrome prior to version 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Firefox

An unexpected message in the WebGPU IPC framework could lead to a use-after-free error and an exploitable sandbox escape. There have been reports of attacks exploiting this flaw in real-world scenarios. This vulnerability affects Firefox versions earlier than 97.0.2, Firefox ESR versions earlier...

Astra Linux – Vulnerability in Firefox

Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in WebGPU in Google Chrome prior to version 101.0.4951.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Using “after free” in WebGPU in Google Chrome before version 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...