Vulnerability index

Browse CVEs

30 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ddk CRITICAL 9.8
CVE-2026-16280

An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 …

Fix: 26.1+
Fix from $2,300 2026-07-24
Ddk HIGH 7.8
CVE-2026-49743

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in t…

Fix: 26.1+
Fix from $1,950 2026-07-24
Ddk HIGH 7.8
CVE-2026-49744

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's…

Fix: 26.1+
Fix from $1,950 2026-07-24
Ddk HIGH 7.8
CVE-2026-49745

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's…

Fix: 26.1+
Fix from $1,950 2026-07-24
Ddk HIGH 7.8
CVE-2026-7639

Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facili…

Fix: 26.1+
Fix from $1,950 2026-07-10
Ddk HIGH 7.8
CVE-2026-34196

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addres…

Fix: 26.1+
Fix from $1,950 2026-07-10
Ddk HIGH 7.8
CVE-2026-41154

Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls. When indexing pages larger …

Fix: 26.1+
Fix from $1,950 2026-07-10
Ddk HIGH 7.8
CVE-2026-45196

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead…

Fix: 26.1+
Fix from $1,950 2026-07-10
Ddk HIGH 7.8
CVE-2026-45203

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted…

Fix: 26.1+
Fix from $1,950 2026-07-10
Ddk HIGH 7.8
CVE-2026-45195

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the p…

Fix: after 25.3
Fix from $1,950 2026-06-26
Ddk HIGH 7.7
CVE-2026-21734

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU…

Fix: after 25.2
Fix from $1,950 2026-06-26
Ddk HIGH 8.1
CVE-2026-22165

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space …

Fix: after 25.2
Fix from $1,950 2026-05-01
Ddk HIGH 8.1
CVE-2026-22166

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space sh…

Fix: after 25.2
Fix from $1,950 2026-05-01
Ddk HIGH 7.8
CVE-2026-22167

Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages. …

Fix: after 25.2
Fix from $1,950 2026-05-01
Ddk HIGH 7.3
CVE-2026-21733

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode mem…

Fix: 25.3+
Fix from $1,950 2026-04-17
Ddk CRITICAL 9.6
CVE-2026-21732

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU…

Fix: after 25.1
Fix from $2,300 2026-03-20
Ddk HIGH 7.8
CVE-2026-22163

Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion …

Fix: after 25.3
Fix from $1,950 2026-03-20
Ddk CRITICAL 9.8
CVE-2025-13952

A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in t…

Fix: 25.3+
Fix from $2,300 2026-01-24
Ddk HIGH 7.8
CVE-2025-10865

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a pot…

Fix: 25.3+
Fix from $1,950 2026-01-13
Ddk HIGH 8.8
CVE-2025-58411

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting crea…

Fix: 25.3+
Fix from $1,950 2026-01-13
Ddk CRITICAL 9.1
CVE-2025-25176

Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of…

Fix: 25.3+
Fix from $2,300 2026-01-13
Ddk MEDIUM 5.9
CVE-2025-58408

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exce…

Fix: after 25.2
Fix from $1,600 2025-12-01
Ddk HIGH 7.4
CVE-2025-58407

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a rea…

Mitigation only
Fix from $1,950 2025-11-17
Ddk HIGH 7.5
CVE-2025-58410

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as rea…

Mitigation only
Fix from $1,950 2025-11-17
Ddk MEDIUM 5.5
CVE-2025-46711

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer dereference kernel exceptions.

Fix: after 25.1
Fix from $1,600 2025-09-22
Ddk HIGH 7.5
CVE-2025-46709

Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception.

Fix: after 25.1
Fix from $1,950 2025-08-09
Ddk MEDIUM 5.2
CVE-2025-46707

Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU.

Fix: 24.1+
Fix from $1,600 2025-06-27
Ddk MEDIUM 5.7
CVE-2025-46710

Possible kernel exceptions caused by reading and writing kernel heap data after free.

Fix: 24.2+
Fix from $1,600 2025-06-16
Ddk HIGH 7.8
CVE-2025-25179

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pag…

Fix: after 24.3
Fix from $1,950 2025-06-02
Ddk HIGH 8.2
CVE-2025-0467

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised…

Fix: after 24.3
Fix from $1,950 2025-04-18