CVE-2026-58765
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed.
Risk Assessment
A local attacker could exploit the logic error to bypass permission checks and escalate to system level, potentially compromising device security.
Recommendation
Apply vendor updates that include the logic error fix in the GPU module.
Other vulnerabilities in GPU
See all- CVE-2023-4211MediumActively exploited
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
- CVE-2026-20515Medium
In the GPU module, there is a possible system crash due to use-after-free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.
- CVE-2026-49746High
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.
Original NVD description (English source)
In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS