CVE-2026-20515
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
In the GPU module, there is a possible system crash due to use-after-free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.
Risk Assessment
Risk of local information disclosure, potentially compromising data confidentiality.
Recommendation
Apply the vendor patch ALPS11122991 (MSV-8132).
Other vulnerabilities in GPU
See all- CVE-2026-58765Medium
In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed.
- CVE-2026-49746High
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.
Original NVD description (English source)
In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132.