Is CVE-2026-34192 actively exploited?

No active exploitation of CVE-2026-34192 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-34192 be exploited remotely?

No. CVE-2026-34192 requires local access to exploit.

What is the CVSS score of CVE-2026-34192?

CVE-2026-34192 has a CVSS score of 7.7 (HIGH).

HOME VULNERABILITIESCVE-2026-34192

HIGH

CVE-2026-34192

CWE-416Published: June 19, 2026· Updated: Jun 22, 2026

7.7

CVSS v3.1

Official Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an error path leading to UAF of GPU page tables.

The vulnerability allows physical memory allocated for MMU page tables to be used after being freed. This was caused by an error path that would not cleanup properly before freeing the physical allocation.

NVD Source

Technical Analysis

CVE-2026-34192 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.7.

From a weakness classification perspective (CWE-416): Use-after-free vulnerabilities involve accessing memory after it has been freed, often enabling arbitrary code execution.