Xen: x86 HVM I/O Port List Traversal (XSA-491)

HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the device model via XENDOMCTLioportmapping, and hence the linked list used may changed at any time. Traversal of those lists while handling guest I/O port accesses therefore needs...

The vulnerability of the Hyper-V component of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Hyper-V component of the Windows operating system is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-10046

Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 memory map handler, implemented in napoca/guests/bioshandlers.c. The handler computes a destination offset into the guest RealModeMemory buffer from guest-controlled ES and EDI...

CVE-2026-27211 Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse

Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. Versions 34.0 through 50.0 arevulnerable to arbitrary host file exfiltration constrained by process privileges when using virtio-block devices backed by raw images. A malicious guest can overwrite its disk header with a crafted...

The vulnerability of the ESXi base microprogramming system driver for Intel 800 Series network controllers allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ESXi base microprogramming system software for Intel 800 Series network controllers is related to improper resource release. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2025-32007

Out-of-bounds read for some TDX before version tdx module 1.5.24 within Ring 0: Hypervisor may allow an information disclosure. Authorized adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attac...

PT-2026-7303

Name of the Vulnerable Software and Affected Versions TDX versions prior to 1.5.24 Description An out-of-bounds read issue exists within the hypervisor component of TDX. A privileged adversary with a low complexity attack may be able to cause information disclosure. This issue may occur via local...

Security Bulletin: This Power System update is being released to address CVE-2025-36238

Summary If an attacker is able to gain system administrator access a Virtual TPM can be compromised through the use of a series of PowerVM service procedures. Vulnerability Details CVEID:CVE-2025-36238 DESCRIPTION: IBM PowerVM Hypervisor could allow a local user with administration privileges to...

Security Bulletin: This Power System update is being released to address CVE-2025-36194

Summary The PowerVM hypervisor may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations. Vulnerability Details CVEID:CVE-2025-36194 DESCRIPTION: IBM PowerVM hypervisor may expose a limited amount of data to a peer partition in...

The vulnerability of the Data Reporter component in Parallels Desktop hypervisor allows a hacker to enhance their privileges.

The vulnerability of the Data Reporter component in Parallels Desktop hypervisor software is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created link...

CVE-2024-41781

IBM PowerVM Platform KeyStore IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1030.00 through FW1030.60, FW1050.00 through FW1050.20, and FW1060.00 through FW1060.10 functionality can be compromised if an attacker gains service access to the HMC. An attacker that gains service access to the H...

CVE-2023-43556

Memory corruption in Hypervisor when platform information mentioned is not aligned...

The vulnerability of the cross-platform hypervisor Xen in Linux operating systems, related to deficiencies in access control, allows attackers to gain access to confidential information.

The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, working remotely, to gain access to confidential information...

EUVD-2019-13497

Malware in sbrugna...

EUVD-2020-29714

Malware in sbrugna...

EUVD-2014-7065

Malware in sbrugna...

EUVD-2014-8696

Malware in sbrugna...

EUVD-2016-2666

Malware in sbrugna...

EUVD-2015-1281

Malware in sbrugna...

The vulnerability of the data management component of virtual machines in Hyper-V software for centralized backup and recovery management systems like PowerProtect Data Manager allows attackers to gain unauthorized access to protected information and increase their privileges.

The vulnerability of the data management component in virtual machine environments within the Hyper-V software for centralized backup and recovery management solutions like PowerProtect Data Manager is related to the storage of passwords in an exposed manner. Exploiting this vulnerability can all...