Oracle Virtualization 访问控制错误漏洞

Oracle Virtualization is a suite of virtualization solutions from Oracle Corporation USA. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the...

CVE-2025-48803 Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

...

KVM Heap Buffer Overflow DoS

The vulnerability of the kvmvmioctlunregistercoalescedmmio function in the virt/kvm/coalescedmmio.c module of the Linux Kernel-Based Virtual Machine KVM virtualization subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

VulnCheck KEV: CVE-2024-21407

Windows Hyper-V Remote Code Execution Vulnerability...

CVE-2021-2131

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-2286

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-2130

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14694

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Orac...

SUSE-SU-2025:01656-1 Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005580 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wifi: ath9k: add range check for connrspepid in htcconnectservice bsc1234847. - CVE-2024-50115: KVM: nSVM: Ignore nCR34:0 when loading PDPTEs from memory bsc123301...

CVE-2013-3834

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5 allows remote attackers to affect availability via unknown vectors related to ttaauxserv...

Important: kernel-livepatch-4.14.355-275.591

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfsbtreecheckdelete CVE-2024-47757 In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse the buffer of the extents path CVE-2024-49882 In t...

Microsoft Hyper-V 安全漏洞

Microsoft Hyper-V is an application from Microsoft USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Microsoft Hyper-V. An attacker exploiting the vulnerability can elevate privileges. The following products and versions are...

RHEL 6 / 7 : qemu-kvm-rhev (RHSA-2015:1004)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1004 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides th...

Windows Hyper-V DoS

The vulnerability of the Windows Hyper-V hardware virtualization system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

KVM VMX DoS

The vulnerability of the vmxentersmm function in the arch/x86/kvm/vmx/vmx.c file of the KVM virtualization subsystem in the Linux operating system is related to the forced exit from the embedded virtualization operation when the SMM state is switched. This vulnerability allows a attacker to trigg...

KVM Kernel Buffer Overflow DoS

The vulnerability in the arch/x86/kvm/x86.c component of the KVM kernel-based virtualization subsystem in Linux operating systems is related to the disabling of the tsc-deadline mode and the execution of a reboot in the guest system. Exploiting this vulnerability can allow an attacker to cause a...

hw: amd: Instruction raise #VC exception at exit

A vulnerability was found in AMD SEV-SNP, where a malicious hypervisor can potentially break confidentiality and integrity of SEV-SNP on Linux guests by injecting interrupts. An attacker can inject interrupt 0x80, which is used by Linux for legacy 32-bit system calls, and arbitrarily change the...

Windows Hyper-V Code Execution

The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to errors in processing the relative path to the directory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2024-14602 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the x86/reboot component. The issue involves VMCLEAR active VMCSes before any emergency reboot. Recommendations: At th...

CVE-2024-22251

VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID chip card interface device. A malicious actor with local administrative privileges on a virtual machine may trigger an out-of-bounds read leading to information disclosure...