CVE-2026-19437 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

USN-8657-1 vim vulnerabilities

It was discovered that Vim incorrectly handled memory when decoding certain JSON input. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. CVE-2026-73071 Yazan Balawn...

CVE-2026-18835

CVE-2026-18835 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A remote authenticated attacker with low privileges can execute arbitrary commands via OS command injection (improper neutralization of special elements in an OS command). The CVSS 3.1 score is 9.9 (CRITICAL) with a changed scope ...

CVE-2026-18840 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer...

CVE-2026-18840

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to local privilege escalation via improper validation of an attacker-controlled pointer, enabling arbitrary code execution (CVSS 8.2 HIGH). No patch version or remediation guidance is provided in the documents; no in-the-wild exploitation is rep...

CVE-2026-18832

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a heap-based buffer overflow exploitable by a remote, unauthenticated attacker to execute arbitrary code (CVSS 8.8 HIGH). The IBM support page (https://www.ibm.com/support/pages/node/7283858) is the only reference; no specific patch version or exploita...

CVE-2026-18832 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-18824

CVE-2026-18824 is an OS command injection vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , caused by improper neutralization of special elements used in an OS command. A remote authenticated attacker can execute arbitrary commands, resulting in full compromise of confidentiality, inte...

CVE-2026-17436 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-17436

CVE-2026-17436 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A heap-based buffer overflow allows a remote attacker to execute arbitrary code. The CVSS 3.1 score is 8.8 (HIGH) with an adjacent network attack vector, requiring no privileges and no user interaction . CISA SSVC assessment indic...

CVE-2026-17422

CVE-2026-17422 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A local attacker can exploit a buffer overflow to execute arbitrary code, with a CVSS 3.1 score of 9.3 (CRITICAL) — the vector indicates no privileges required, no user interaction, and a scope change with full confidentiality, in...

CVE-2026-17168 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-17168

CVE-2026-17168 is a stack-based buffer overflow in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a remote authenticated attacker to execute arbitrary code. The CVSS 3.1 score is 8.5 (HIGH) with a changed scope, reflecting full compromise of confidentiality, integrity, and availability. CI...

CVE-2026-17160

CVE-2026-17160 is a critical (CVSS 9.8) vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , caused by an integer overflow during size computation that allows a remote, unauthenticated attacker to execute arbitrary code over the network with no user interaction. CISA's SSVC assessment rat...

CVE-2026-17160 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation...

CVE-2026-17157

CVE-2026-17157 is a critical (CVSS 9.8) stack buffer overflow in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a remote attacker to execute arbitrary code over the network with no privileges or user interaction required. It is one of seven similar stack buffer overflow CVEs disclosed toge...

CVE-2026-17157 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...

CVE-2026-17152

CVE-2026-17152 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , allowing a remote attacker to execute arbitrary code via a buffer overflow . The vulnerability requires no authentication or user interaction, with a CVSS 3.1 score of 9.8 (CRITICAL) . CISA's SSVC assessment rates it as automatabl...

CVE-2026-17152 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-17145

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 are vulnerable to remote arbitrary code execution due to improper privilege management. CVSS 9.8 critical; no patch version or exploit details provided. IBM support page is the sole reference; monitor for updates. Exploitation status is not provided.