BaselineWatch
Desk

CVE-2026-49744

7.8 high SSVC exploitation: none Analyzed

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Out of bounds accesses triggered by malware introduced to a Guest KMD could allow privilege escalation which escapes virtualization boundaries.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 7.8 · imaginationtechNVD modified 2026-10-24 13:10

Affected (CPE criteria) 2

  • cpe:2.3:a:imaginationtech:ddk:*:*:*:*:*:*:*:*
  • cpe:2.3:a:imaginationtech:ddk:26.1:rtm1:*:*:*:*:*:*

References 1