Live › vulnerability › CVE-2026-74915
A web page with specially crafted WebGPU content can trigger an out-of-bounds read or write in the GPU GLES user-space library, crashing the GPU render process. On certain platforms, where that process runs with system privileges, this could enable further exploitation of the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 02:28 UTC. All times on this page are UTC.
A visited web page is the trigger, so anyone using the affected browser on the listed platforms is exposed; the sources do not name the browser, versions or platforms. unknown
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or write crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits on the device.
This page as .md · .json · in your agent: get_signal("CVE-2026-74915")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.