CVE-2026-20591: Use After Free

Published Nov 2, 2026

Updated

In GPU pdma, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11365075; Issue ID: MSV-9546.

Event History

Nov 2, 2026

CVE Published

via NVD·03:17 AM

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Exploitation is local and requires no privileges. No user interaction or additional execution privileges are needed.

What is the potential impact if exploitation succeeds?

Successful exploitation could allow local escalation of privilege and affect confidentiality, integrity, and availability.

Is there an identified fix or tracking information for this issue?

The issue is associated with Patch ID ALPS11365075 and Issue ID MSV-9546.

CVE-2026-20591: Use After Free

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Is there an identified fix or tracking information for this issue?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Is there an identified fix or tracking information for this issue?