Where
-Infinity
0

Trending

Last week
Last month
Last year

Qemu QemuQemu-kvm: heap buffer overflow in virtio-blk scsi request handling

Risk 41
Severity
6.7
First published (updated )
CVE-2026-48914

Qemu QemuQEMU's virtio-blk device can write past the end of a heap-allocated MMIO bounce buffer while handlin…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2488283

Qemu QemuQEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability

Risk 46
First published (updated )
Advisory
ZDI-26-332

Qemu QemuZDI-26-332: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability

Risk 49
First published (updated )
ZDI-CAN-27578

oss-secQEMU CXL Memory Corruption Vulnerability ("QEMUtiny")

First published (updated )
https://seclists.org/oss-sec/2026/q2/618
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Qemu QemuQemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write

Risk 69
Severity
7.8
First published (updated )
CVE-2026-3842

Qemu QemuIf cpu_physical_memory_map() returns a length shorter than the one that was passed into the function…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2458150

Qemu QemuQemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)

Risk 67
Severity
7.4
First published (updated )
CVE-2026-3195

Qemu QemuA flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the `vir…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2443817

Qemu QemuInteger Overflow

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2443789
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Qemu QemuQemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing

Risk 32
Severity
5.1
First published (updated )
CVE-2026-2243

Qemu QemuA heap buffer over-read was found in block/vmdk.c. A crafted VMDK file can make qemu-img (or qemu wi…

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2440934

Qemu QemuQemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq

Risk 36
Severity
6.5
First published (updated )
CVE-2026-0665

Qemu QemuAn off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this flaw…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2428640

Qemu QemuQemu-kvm: unbounded allocation in virtio-crypto

Risk 32
Severity
5.5
First published (updated )
CVE-2025-14876
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Qemu QemuA flaw was found in the virtio-crypto device of QEMU. The symmetric path enforces a length limit usi…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2423549

Qemu QemuQemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode

Risk 36
Severity
6.2
First published (updated )
CVE-2025-12464

Qemu QemuQemu-kvm: vnc websocket handshake use-after-free

Risk 43
Severity
7.5
First published (updated )
CVE-2025-11234

Qemu QemuUse After Free

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2401209

Qemu QemuQemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback

Risk 18
Severity
3.3
First published (updated )
CVE-2025-8860
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Qemu Qemuhw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue …

Risk 34
Severity
5.4
First published (updated )
CVE-2025-54567

Qemu Qemuhw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to C…

Risk 34
Severity
5.4
First published (updated )
CVE-2025-54566

Linux Linux kernelvhost-scsi: protect vq->log_used with vq->mutex

Risk 32
Severity
5.5
First published (updated )
CVE-2025-38074

Qemu QemuQemu-kvm: information leak in virtio devices

Risk 15
Severity
3.8
EPSS
0.04%
First published (updated )
CVE-2024-8612

redhat Enterprise LinuxQemu-kvm: usb: assertion failure in usb_ep_get()

Risk 24
Severity
5.5
EPSS
0.04%
First published (updated )
CVE-2024-8354
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

debian/qemuQemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()

Risk 72
Severity
7.8
First published (updated )
CVE-2024-7730

Qemu QemuQemu: denial of service via improper synchronization in qemu nbd server during socket closure

Risk 31
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2024-7409

redhat Enterprise LinuxQemu-kvm: virtio-net: queue index out-of-bounds access in software rss

Risk 28
Severity
6.8
EPSS
0.04%
First published (updated )
CVE-2024-6505

Qemu QemuQemu-kvm: net: assertion failure in update_sctp_checksum()

Risk 24
Severity
5.5
EPSS
0.04%
First published (updated )
CVE-2024-3567

Qemu QemuDouble Free

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2274211
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203