VULNERABILITY INTELLIGENCE

CVE-2025-58407

CVSS score7.4 HIGH

EPSS probability0.21%

CISA KEVNot currently listed

Published2025-11-17

Last modified2026-10-07

Description

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine.