VTE emulator DoS

The vulnerability of the terminal emulation library VTE is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to cause a service failure...

QEMU DoS

The vulnerability of the QEMU hardware emulation software is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a hacker to cause a system failure...

PT-2026-56692

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A buffer over-read issue exists in the hardware emulator. This occurs during the validation of VNC extended clipboard data length, which could allow a remote attacker to access sensitive data...

OESA-2026-2091 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a 12-byte leak of sensitive information or a denial of...

PT-2026-34940

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the KVM x86 component. This occurs when the emulator initiates a write using an on-stack local variable as the source, the write splits a page boundary,...

CVE-2026-29646

In OpenXiangShan NEMU prior to 55295c4, when running with RVH Hypervisor extension enabled, a VS-mode guest write to the supervisor interrupt-enable CSR sie may be handled incorrectly and can influence machine-level interrupt enable state mie. This breaks privilege/virtualization isolation and ca...

EUVD-2026-23958

In OpenXiangShan NEMU prior to 55295c4, when running with RVH Hypervisor extension enabled, a VS-mode guest write to the supervisor interrupt-enable CSR sie may be handled incorrectly and can influence machine-level interrupt enable state mie. This breaks privilege/virtualization isolation and ca...

CVE-2026-29648

In OpenXiangShan NEMU, when Smstateen is enabled, clearing mstateen0.ENVCFG does not correctly restrict access to henvcfg and senvcfg. As a result, less-privileged code may read or write these CSRs without the required exception, potentially bypassing intended state-enable based isolation control...

CVE-2026-29646

OpenXiangShan NEMU (prior to version 55295c4 ) contains a security vulnerability when running with the RVH (Hypervisor extension) enabled. An incorrectly handled write by a VS-mode guest to the supervisor interrupt-enable CSR (sie) can improperly influence the machine-level interrupt enable state...

CVE-2026-29646

In OpenXiangShan NEMU prior to 55295c4, when running with RVH Hypervisor extension enabled, a VS-mode guest write to the supervisor interrupt-enable CSR sie may be handled incorrectly and can influence machine-level interrupt enable state mie. This breaks privilege/virtualization isolation and ca...

NEMU 安全漏洞

NEMU is an open-source teaching system simulator developed by XiangShan. NEMU has a security vulnerability, which stems from insufficient Smstateen permissions. This vulnerability may allow low-privilege code access to IMSIC state, potentially leading to cross-context information leaks or...

OESA-2026-1992 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation...

K000160853: Multiple Vim vulnerabilities

Security Advisory Description CVE-2026-28417 Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL e.g., using the scp:// protocol handler, an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2026-007180)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007180 advisory. Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal...

OESA-2026-1845 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the virtiosndpcmincb function did not check whether the iov could fit the data buffer,...

GHSA-P5VH-P63C-CG4V vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...

CVE-2026-23138 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...

CVE-2026-23226 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...

GHSA-692F-C3G3-7699 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...

EUVD-2016-10833

Multi Emulator Super System 0.154-3.1 contains a buffer overflow vulnerability in the gamma parameter handling that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized gamma parameter value to overflow the stack buffer and overwrite the...