Ddk

Vendor:

First CVE: Jan 16, 2024 · Active for 2 years

24
Total CVEs
More Total CVEs than 95% of tracked products
8.0
Avg CVEs / Year
Higher CVE frequency than 94% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 44% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Ddk over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 16, 2024
2 years ago
Most Recent CVE
Jun 26, 2026
28 days ago

CVE Severity & Scoring

Ddk24 CVEs
All CVEs352,231 CVEs
LowMediumHighCritical
Attack Vector
Local13 (54.2%)
Network8 (33.3%)
Unknown0 (0.0%)
Physical3 (12.5%)
Adjacent Network0 (0.0%)
Attack Complexity
Low22 (91.7%)
High2 (8.3%)
Unknown0 (0.0%)
User Interaction
None21 (87.5%)
Unknown0 (0.0%)
Required3 (12.5%)
Privileges Required
Low11 (45.8%)
High0 (0.0%)
None13 (54.2%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (24 CVEs).

24 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU shader compiler library.
Jan 24, 20269.834NONO
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On ce
Jun 26, 20267.732NONO
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platfo
May 1, 20268.132NONO
Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted range of memory for th
Jun 26, 20267.831NONO
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared library. On certain plat
May 1, 20268.131NONO
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting creating a potential use after free
Jan 13, 20268.831NONO
Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages. Under certain circumstances t
May 1, 20267.830NONO
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On ce
Mar 20, 20269.630NONO
Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platform.
Jan 13, 20269.127NONO
Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to
Mar 20, 20267.826NONO

Exploit Exposure

Signals from CVEs in this product scope (24 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (24 CVEs).

Media Mentions

Signals from CVEs in this product scope (24 CVEs).

Top CNAs Publishing CVEs For Ddk

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
26.117.80.1%00
25.347.90.2%00
25.227.50.2%00
25.125.40.2%00
24.317.50.3%00
24.236.80.2%00
24.127.70.2%00
23.317.50.3%00
23.228.70.2%00
1.1846.70.2%00
1.1746.70.2%00
1.1524.80.1%00