Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable subsequent exploit on the system.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-05-01 | 1 | Disclosure1 |
| 2026-05-10 | 4 | Disclosure3General1 |
CRITICAL: CVE-2026-22166 (CVSS 9.6) — multiple products. CVE: CVE-2026-22166 CVSS: 9.6 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
This post announces the critical advisory for CVE-2026-22166, highlighting its CVSS 9.6 score and severity across multiple products. No exploits, PoC, or patch information is provided.
CVE-2026-22166 A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On … https://www.cve.org/CVERecord?id=CVE-2026-22166
Post summary
The snippet provides technical details on CVE-2026-22166—including a write UAF crash via WebGPU content in GPU GLES—but does not mention a PoC, exploitation, patch, or false positives.
https://lyrie.ai/research/research/cve-2026-22166-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The post merely directs to a research advisory URL and includes generic hashtags, offering no substantive details about the CVE beyond its reference.
--- Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation. CVE: CVE-2026-22166 CVSS: 9.6 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The advisory confirms CVE-2026-22166 as a critical vulnerability with a CVSS score of 9.6, but it does not provide a PoC, exploit, active exploitation evidence, or patch information.
CVE: CVE-2026-22166 CVSS: 9.6 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES…
Post summary
The text announces CVE-2026-22166, describing a critical WebGPU UAF crash with associated CVSS score and advisory status, but provides no PoC, exploit, or patch details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | imaginationtech | ddk | - | - | - |
| App | imaginationtech | ddk | 25.3 | - | - |