CVE-2026-22163

>= 25.1 and <= 25.3

Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that

7.8HIGH

CVE-2026-21732

>= 24.1 and <= 25.1

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds wri

9.6CRITICAL

CVE-2026-21736

all versions

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wr

4.4MEDIUM

CVE-2025-13952

< 25.3

A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-af

9.8CRITICAL

CVE-2025-10865

< 25.3

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference coun

7.8HIGH

CVE-2025-58411

< 25.3

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources refe

8.8HIGH

CVE-2025-58409

< 25.3

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary

3.5LOW

CVE-2025-25176

< 25.3

Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-se

9.1CRITICAL

CVE-2025-58408

<= 25.2

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can

5.9MEDIUM

CVE-2025-58407

all versions

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race conditio

7.4HIGH

CVE-2025-58410

all versions

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buff

7.5HIGH

CVE-2025-46711

>= 1.17 and <= 25.1

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer dereference kern

5.5MEDIUM

CVE-2025-46709

>= 1.17 and <= 25.1

Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel excepti

7.5HIGH

CVE-2025-46708

>= 23.2 and < 24.2

Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work o

4.3MEDIUM

CVE-2025-46707

>= 23.2 and < 24.1

Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU.

5.2MEDIUM

CVE-2025-46710

>= 1.15 and < 24.2

Possible kernel exceptions caused by reading and writing kernel heap data after free.

5.7MEDIUM

CVE-2025-25179

<= 24.3

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary

7.8HIGH

CVE-2025-0467

<= 24.3

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the

8.2HIGH

CVE-2023-4969

<= 23.2

A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory regio

6.5MEDIUM