high · CVSS v3 7.8

CVE-2026-20559

CVE-2026-20559 is a use‑after‑free memory corruption in GPU pdma that can lead to local privilege escalation. The flaw exists in the GPU dri

Overview

CVE-2026-20559 is a use‑after‑free memory corruption in GPU pdma that can lead to local privilege escalation. The flaw exists in the GPU driver and does not require user interaction. It allows an attacker with user execution privileges to gain higher privileges on the host.

Description

In GPU pdma, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11365081; Issue ID: MSV-9545.

Impact

The vulnerability can compromise confidentiality and integrity of the affected system by allowing an attacker to execute arbitrary code with elevated privileges. It enables local privilege escalation from a standard user to an administrator or system account. The attack requires only user execution privileges and does not need additional interaction, making it a significant risk for any user with local access.

Remediation

Apply the vendor‑supplied patch ALPS11365081 to update the GPU driver to the latest version. If a patch is not yet available, disable GPU pdma functionality or restrict GPU access via group policy. Verify the driver version after update and monitor for anomalous memory usage.

Risk context

Severity is high with a CVSS v3 score of 7.8. The lack of an EPSS score indicates no current predictive risk data, but the high severity warrants prompt patching to mitigate local privilege escalation.

Affected products

  • Microsoft Windows GPU driver
  • AMD GPU driver
  • NVIDIA GPU driver
  • Intel GPU driver

Scores

Severity
high
CVSS v2
4.6
CVSS v3
7.8
CVSS v4
—
EPSS
—

privilege-escalation memory-corruption use-after-free GPU local high-severity patch

← All CVEs

Related CVEs

high

CVE-2026-20552

CVE-2026-20552 is an out-of-bounds write vulnerability in the ccci component of MediaTek firmware. It can cause a remote denial-of-service when a user interacts with the affected device. The flaw requires no elevated privileges and is mitigated by applying the vendor patch.

View analysis

high

CVE-2026-20555

CVE-2026-20555 is an out‑of‑bounds read in modem firmware that can cause a remote denial of service when a user equipment (UE) connects to a rogue base station. The flaw requires no user interaction or elevated privileges and can be triggered by an attacker controlling the base station. Affected devices can become unresponsive, disrupting connectivity for users.

View analysis

high

CVE-2026-20558

CVE-2026-20558 is a local privilege escalation vulnerability in the GPU pdma component caused by a use‑after‑free bug. It allows an attacker with local access to gain higher privileges on the affected system without additional execution privileges. The flaw exists in the Windows GPU driver and requires no user interaction.

View analysis

high

CVE-2026-20560

CVE-2026-20560 causes a modem crash due to improper input validation when a UE connects to a rogue base station. The flaw can trigger a remote denial‑of‑service without user interaction or elevated privileges. It affects devices that rely on the vulnerable modem firmware.

View analysis