PULSE
FEED
ransomemperador reclama a Holcim · CH · Manufacturingransomsafepay reclama a quevedo-ponce.com · EC · Otherransomsafepay reclama a mars-semi.com.tw · TW · Manufacturingransomsafepay reclama a Rood Trucking · US · Transportationransomsafepay reclama a grifosespinoza.com · PE · Otherransomsafepay reclama a jumonji-u.ac.jp · JP · Educationransomsafepay reclama a everon.com.ar · AR · Otherransomsafepay reclama a goldencrops.com.tw · TW · Agriculture and Food Productionransomsafepay reclama a layam.com · ILransomsafepay reclama a uaa.mx · MX · Educationransomn0n reclama a Digital Triumph · MY · Technologyransomthegentlemen reclama a First Dental · US · Healthcareransomthegentlemen reclama a Angeles Contractor · MX · Manufacturingransomthegentlemen reclama a SK Capital Partners · US · Financial Servicesransomemperador reclama a Holcim · CH · Manufacturingransomsafepay reclama a quevedo-ponce.com · EC · Otherransomsafepay reclama a mars-semi.com.tw · TW · Manufacturingransomsafepay reclama a Rood Trucking · US · Transportationransomsafepay reclama a grifosespinoza.com · PE · Otherransomsafepay reclama a jumonji-u.ac.jp · JP · Educationransomsafepay reclama a everon.com.ar · AR · Otherransomsafepay reclama a goldencrops.com.tw · TW · Agriculture and Food Productionransomsafepay reclama a layam.com · ILransomsafepay reclama a uaa.mx · MX · Educationransomn0n reclama a Digital Triumph · MY · Technologyransomthegentlemen reclama a First Dental · US · Healthcareransomthegentlemen reclama a Angeles Contractor · MX · Manufacturingransomthegentlemen reclama a SK Capital Partners · US · Financial Services
← Todos los CVEs
CVE Watch26 oct 2026

CVE-2026-22167

Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory

CVSS

7.8

Alto

EPSS

0.2%

p4

KEV

—

Exploit Today

1

0-100

Publicado: 1 may 2026 · Última mod.: 26 oct 2026 · CWE-119

EPSS · 30d
0.2%EPSS · 30 días0.2%
2026-10-022026-10-30
Descripción técnica

Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform altering their behaviour. This attack can lead the GPU to perform write operations on restricted internal GPU buffers that can lead to a second order affect of corrupted arbitrary physical memory.

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-760308.8 ALT
9.7%
——3Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)10h
CVE-2026-760298.8 ALT
9.7%
——3Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)10h
CVE-2026-760274.3 MED
9.4%
——3Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)23h
CVE-2026-760268.8 ALT
9.7%
——3Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)10h
CVE-2026-760246.5 MED
7.5%
——2Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)23h
CVE-2026-1192678.8 ALT
9.7%
——3Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)10h