| CVE-2026-45195 |
Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a…
|
7.8
High
|
Jun 26, 2026 |
| CVE-2026-21734 |
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write…
|
7.7
High
|
Jun 26, 2026 |
| CVE-2026-41156 |
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of…
|
7.7
High
|
Jun 19, 2026 |
| CVE-2026-34192 |
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an error path leading…
|
7.7
High
|
Jun 19, 2026 |
| CVE-2026-41158 |
Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical…
|
7.8
High
|
Jun 12, 2026 |
| CVE-2026-41157 |
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an…
|
9.8
Critical
|
Jun 12, 2026 |
| CVE-2026-41155 |
An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared…
|
5.5
Medium
|
Jun 12, 2026 |
| CVE-2026-34195 |
Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out…
|
8.8
High
|
Jun 12, 2026 |
| CVE-2026-34194 |
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of a…
|
7.1
High
|
Jun 8, 2026 |
| CVE-2026-22164 |
Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory
|
7.5
High
|
Jun 8, 2026 |
| CVE-2026-34193 |
Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a…
|
4.3
Medium
|
Jun 1, 2026 |
| CVE-2026-22166 |
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF…
|
8.1
High
|
May 1, 2026 |
| CVE-2026-22165 |
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF…
|
8.1
High
|
May 1, 2026 |
| CVE-2026-22167 |
Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to…
|
7.8
High
|
May 1, 2026 |
| CVE-2026-21733 |
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to…
|
7.3
High
|
Apr 17, 2026 |
| CVE-2026-22163 |
Requires malware code to misuse the DDK kernel module IOCTL interface
|
7.8
High
|
Mar 20, 2026 |
| CVE-2026-21732 |
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write…
|
9.6
Critical
|
Mar 20, 2026 |
| CVE-2026-21736 |
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to…
|
4.4
Medium
|
Mar 9, 2026 |
| CVE-2025-13952 |
A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a…
|
9.8
Critical
|
Jan 24, 2026 |
| CVE-2025-10865 |
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of…
|
7.8
High
|
Jan 13, 2026 |
| CVE-2025-58411 |
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of…
|
8.8
High
|
Jan 13, 2026 |
| CVE-2025-58409 |
Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write…
|
3.5
Low
|
Jan 13, 2026 |
| CVE-2025-25176 |
Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running…
|
9.1
Critical
|
Jan 13, 2026 |
| CVE-2025-58408 |
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data…
|
5.9
Medium
|
Dec 1, 2025 |
| CVE-2025-58407 |
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU…
|
7.4
High
|
Nov 17, 2025 |