CVE-2026-19437

CVE-2026-19437 is a buffer overflow vulnerability in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 that allows a remote attacker to execute arbitrary code . The CVSS 3.1 score is 8.1 (HIGH) with a network attack vector, high complexity, no privileges or user interaction required, and high impact o...

CVE-2026-19437 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-54389

Ghidra (NSA's reverse engineering platform) versions before 12.1.3 are affected by an uncontrolled resource consumption vulnerability in the PDB parser . The AbstractPdb deserialization routine reads all remaining parameters into an unbounded list when processing a crafted PDB file with an oversi...

CVE-2026-18832

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a heap-based buffer overflow exploitable by a remote, unauthenticated attacker to execute arbitrary code (CVSS 8.8 HIGH). The IBM support page (https://www.ibm.com/support/pages/node/7283858) is the only reference; no specific patch version or exploita...

CVE-2026-18832 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-18828

CVE-2026-18828 is a CWE-787 out-of-bounds write in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1, rated CVSS 5.4 (Medium) with adjacent network vector. IBM provides APARs IJ59566–IJ59563 and VIOS Fix Packs 4.1.0.50/4.1.1.30/4.1.2.20 as remediation; no workarounds are listed. No exploitation in the wild is...

CVE-2026-18828 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow...

CVE-2026-17436

CVE-2026-17436 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A heap-based buffer overflow allows a remote attacker to execute arbitrary code. The CVSS 3.1 score is 8.8 (HIGH) with an adjacent network attack vector, requiring no privileges and no user interaction . CISA SSVC assessment indic...

CVE-2026-17436 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-17425

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have a stack buffer overflow exploitable remotely with no authentication, causing denial of service (CVSS 7.5). IBM's support page (https://www.ibm.com/support/pages/node/7283858) should be checked for applicable fixes. Exploitation details are not provided.

CVE-2026-17425 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack buffer overflow...

CVE-2026-17422

CVE-2026-17422 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A local attacker can exploit a buffer overflow to execute arbitrary code, with a CVSS 3.1 score of 9.3 (CRITICAL) — the vector indicates no privileges required, no user interaction, and a scope change with full confidentiality, in...

CVE-2026-17422 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-17168 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-17168

CVE-2026-17168 is a stack-based buffer overflow in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a remote authenticated attacker to execute arbitrary code. The CVSS 3.1 score is 8.5 (HIGH) with a changed scope, reflecting full compromise of confidentiality, integrity, and availability. CI...

CVE-2026-17160

CVE-2026-17160 is a critical (CVSS 9.8) vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , caused by an integer overflow during size computation that allows a remote, unauthenticated attacker to execute arbitrary code over the network with no user interaction. CISA's SSVC assessment rat...

CVE-2026-17160 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation...

CVE-2026-17159

CVE-2026-17159 is an integer overflow vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a remote attacker to cause a denial of service . The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector requiring no privileges and no user interaction . CISA SSVC assessment indi...

CVE-2026-17159 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow...

CVE-2026-17157

CVE-2026-17157 is a critical (CVSS 9.8) stack buffer overflow in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a remote attacker to execute arbitrary code over the network with no privileges or user interaction required. It is one of seven similar stack buffer overflow CVEs disclosed toge...