CVE-2026-20558
High · 8.4CVSS
8.4
EPSS
0.1%
Published
Nov 2, 2026
CISA due date
—
The record
In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11365070; Issue ID: MSV-9547.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-104608 A remote code execution vulnerability was identified in GitHub Enterprise Server in the… CWE-416
- CVE-2026-121257 Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-416
- CVE-2026-121246 Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a… CWE-416
- CVE-2026-121250 Use after free in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-416
- CVE-2026-121241 Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38… CWE-416
- CVE-2026-121238 Use after free in Source in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-416
- CVE-2026-121217 Use after free in Streaming in Google Chrome prior to 157.0.8103.38 allowed an adjacent… CWE-416
- CVE-2026-121211 Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-416