Browse CVEs

CRITICAL 9.8 CVE-2026-16280 An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 … Ddk 26.1+ Fix from $2,3002026-07-24 HIGH 7.8 CVE-2026-49743 Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in t… Ddk 26.1+ Fix from $1,9502026-07-24 HIGH 7.8 CVE-2026-49744 Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's… Ddk 26.1+ Fix from $1,9502026-07-24 HIGH 7.8 CVE-2026-49745 Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's… Ddk 26.1+ Fix from $1,9502026-07-24 HIGH 7.8 CVE-2026-7639 Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facili… Ddk 26.1+ Fix from $1,9502026-07-10 HIGH 7.8 CVE-2026-34196 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addres… Ddk 26.1+ Fix from $1,9502026-07-10 HIGH 7.8 CVE-2026-41154 Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls. When indexing pages larger … Ddk 26.1+ Fix from $1,9502026-07-10 HIGH 7.8 CVE-2026-45196 Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead… Ddk 26.1+ Fix from $1,9502026-07-10 HIGH 7.8 CVE-2026-45203 Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted… Ddk 26.1+ Fix from $1,9502026-07-10 HIGH 7.8 CVE-2026-45195 Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the p… Ddk after 25.3 Fix from $1,9502026-06-26 HIGH 7.7 CVE-2026-21734 A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU… Ddk after 25.2 Fix from $1,9502026-06-26 HIGH 8.1 CVE-2026-22165 A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space … Ddk after 25.2 Fix from $1,9502026-05-01 HIGH 8.1 CVE-2026-22166 A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space sh… Ddk after 25.2 Fix from $1,9502026-05-01 HIGH 7.8 CVE-2026-22167 Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages. … Ddk after 25.2 Fix from $1,9502026-05-01 HIGH 7.3 CVE-2026-21733 Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode mem… Ddk 25.3+ Fix from $1,9502026-04-17 CRITICAL 9.6 CVE-2026-21732 A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU… Ddk after 25.1 Fix from $2,3002026-03-20 HIGH 7.8 CVE-2026-22163 Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion … Ddk after 25.3 Fix from $1,9502026-03-20 CRITICAL 9.8 CVE-2025-13952 A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in t… Ddk 25.3+ Fix from $2,3002026-01-24 HIGH 7.8 CVE-2025-10865 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a pot… Ddk 25.3+ Fix from $1,9502026-01-13 HIGH 8.8 CVE-2025-58411 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting crea… Ddk 25.3+ Fix from $1,9502026-01-13 CRITICAL 9.1 CVE-2025-25176 Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of… Ddk 25.3+ Fix from $2,3002026-01-13 MEDIUM 5.9 CVE-2025-58408 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exce… Ddk after 25.2 Fix from $1,6002025-12-01 HIGH 7.4 CVE-2025-58407 Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a rea… Ddk Mitigation only Fix from $1,9502025-11-17 HIGH 7.5 CVE-2025-58410 Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as rea… Ddk Mitigation only Fix from $1,9502025-11-17 MEDIUM 5.5 CVE-2025-46711 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer dereference kernel exceptions. Ddk after 25.1 Fix from $1,6002025-09-22 HIGH 7.5 CVE-2025-46709 Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception. Ddk after 25.1 Fix from $1,9502025-08-09 MEDIUM 5.2 CVE-2025-46707 Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU. Ddk 24.1+ Fix from $1,6002025-06-27 MEDIUM 5.7 CVE-2025-46710 Possible kernel exceptions caused by reading and writing kernel heap data after free. Ddk 24.2+ Fix from $1,6002025-06-16 HIGH 7.8 CVE-2025-25179 Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pag… Ddk after 24.3 Fix from $1,9502025-06-02 HIGH 8.2 CVE-2025-0467 Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised… Ddk after 24.3 Fix from $1,9502025-04-18