15141 matches found
CVE-2026-12080 Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys
A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...
EUVD-2026-45941
A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...
PT-2026-61584
Name of the Vulnerable Software and Affected Versions QEMU Guest Agent affected versions not specified Description A flaw exists in the QEMU Guest Agent qga within the guest-ssh-add-authorized-keys command handler. A local unprivileged user can exploit this by manipulating symbolic links through ...
CVE-2026-12080: UNIX Symbolic Link (Symlink) Following
A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...
Linux Distros Unpatched Vulnerability : CVE-2026-12080
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by...
Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write
...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-46215 Exploit for Linux 7.0 - More Stable & Reliable...
CVE-2026-51083
Incorrect access control in Proxmox Virtual Environment PVE 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users within limited privileges to obtain hashed passwords via the cloudinit/dump API...
CVE-2026-51083: Improper Access Control
Incorrect access control in Proxmox Virtual Environment PVE 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users within limited privileges to obtain hashed passwords via the cloudinit/dump API...
GHSA-C79V-Q7H2-4C95 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-gcp...
CVE-2026-43204 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-gcp...
CVE-2026-23371 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-aws...
CVE-2026-23374 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp...
CVE-2026-43308 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp...
CVE-2026-43326 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp...
CVE-2026-45991 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp...
CVE-2026-52960 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp...
GHSA-3VVP-54WC-F6JR vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp...