CVE-2026-16280 | Critical | 9.8 | 2026-07-24 | An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This c… |
CVE-2026-49745 | High | 7.8 | 2026-07-24 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualis… |
CVE-2026-49744 | High | 7.8 | 2026-07-24 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualis… |
CVE-2026-49743 | High | 7.8 | 2026-07-24 | Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel… |
CVE-2026-7639 | High | 7.8 | 2026-07-10 | Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unp… |
CVE-2026-45203 | High | 7.8 | 2026-07-10 | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of… |
CVE-2026-45196 | High | 7.8 | 2026-07-10 | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead to privil… |
CVE-2026-41154 | High | 7.8 | 2026-07-10 | Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls.
When indexing pages larger than 4kB i… |
CVE-2026-34196 | High | 7.8 | 2026-07-10 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the… |
CVE-2026-45195 | High | 7.8 | 2026-06-26 | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted r… |
CVE-2026-21734 | High | 7.7 | 2026-06-26 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader co… |
CVE-2026-34193 | Medium | 4.3 | 2026-06-01 | Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended GPU… |
CVE-2026-22167 | High | 7.8 | 2026-05-01 | Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages.
Under ce… |
CVE-2026-22166 | High | 8.1 | 2026-05-01 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared libra… |
CVE-2026-22165 | High | 8.1 | 2026-05-01 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared lib… |
CVE-2026-21733 | High | 7.3 | 2026-04-17 | Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and fi… |
CVE-2026-22163 | High | 7.8 | 2026-03-20 | Requires malware code to misuse the DDK kernel module IOCTL interface.
Such code can use the interface in an unsupported way that allows subversion of the GPU… |
CVE-2026-21732 | Critical | 9.6 | 2026-03-20 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader co… |
CVE-2026-21736 | Medium | 4.4 | 2026-03-09 | Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory.
This… |
CVE-2025-13952 | Critical | 9.8 | 2026-01-24 | A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU sha… |
CVE-2025-10865 | High | 7.8 | 2026-01-13 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use… |
CVE-2025-58411 | High | 8.8 | 2026-01-13 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting creating a pot… |
CVE-2025-58409 | Low | 3.5 | 2026-01-13 | Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages.
Under… |
CVE-2025-25176 | Critical | 9.1 | 2026-01-13 | Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platfor… |
CVE-2025-58408 | Medium | 5.9 | 2025-12-01 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and… |
CVE-2025-58407 | High | 7.4 | 2025-11-17 | Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or w… |
CVE-2025-58410 | High | 7.5 | 2025-11-17 | Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only.
T… |
CVE-2025-46711 | Medium | 5.5 | 2025-09-22 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer dereference kernel exceptions. |
CVE-2025-46709 | High | 7.5 | 2025-08-09 | Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception. |
CVE-2025-46708 | Medium | 4.3 | 2025-06-27 | Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU. |
CVE-2025-46707 | Medium | 5.2 | 2025-06-27 | Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU. |
CVE-2025-46710 | Medium | 5.7 | 2025-06-16 | Possible kernel exceptions caused by reading and writing kernel heap data after free. |
CVE-2025-25179 | High | 7.8 | 2025-06-02 | Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. |
CVE-2025-0467 | High | 8.2 | 2025-04-18 | Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memor… |
CVE-2023-4969 | Medium | 6.5 | 2024-01-16 | A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on va… |