5707 matches found
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
...
Microsoft Hypervisor-Protected Code Integrity Security Vulnerability
Microsoft Hypervisor-Protected Code Integrity is a security feature of Windows from Microsoft Corporation USA that makes it difficult for malicious programs to hijack computers using low-level drivers. A security vulnerability exists in Microsoft Hypervisor-Protected Code Integrity. An attacker...
Microsoft Hyper-V 安全漏洞
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A remote code execution vulnerability exists in Microsoft Hyper-V, which can be exploited by an attacker to execute arbitrary code on a system...
PT-2024-1080 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security-feature bypass vulnerability in the Hypervisor-Protected Code Integrity HVCI feature of the Windows operating system. This vulnerability allows attackers ...
DEBIAN-CVE-2023-34327
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...
ALPINE-CVE-2023-34327
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...
UBUNTU-CVE-2023-34328
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...
CVE-2023-34325
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. libfsimage contains parsing code for several filesystems, most of them based on grub-legacy code. libfsimage is used by pygrub to inspect guest disks. Pygrub runs as the...
AZL-32311 CVE-2023-50711 affecting package cloud-hypervisor for versions less than 32.0-3
vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...
CVE-2023-33036
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call...
Code injection
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call...
CVE-2023-33036 NULL Pointer Dereference in Hypervisor
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call...
CVE-2023-33036 NULL Pointer Dereference in Hypervisor
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call...
CVE-2023-33036
The CVE-2023-33036 issue affects Qualcomm closed-source components in the hypervisor. It is described as a permanent DoS caused by a NULL pointer dereference when an untrusted VM lacking PSCI support issues a PSCI call, leading to hypervisor disruption (availability impact High). Reported in Qual...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a denial of service vulnerability in the virtual machine hypervisor...
How to cancel pending power actions
One or more of the pending power actions in the queue to be marked as canceled andcannot be canceled once they have started to be processed by the hypervisor...
QEMU NVMe Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of QEMU. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the NVMe...
Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Parallels Desktop. User interaction is required to exploit this vulnerability in that the target in a guest system must visit a malicious page or open a malicious file. The specific flaw exists withi...
Virtuozzo Hybrid Infrastructure 6.0 Hotfix 1 (6.0.0-247)
This update provides important stability fixes. Vulnerability id: VSTOR-59380 Prometheus does not show network traffic for the storage interface if RDMA is enabled. Vulnerability id: VSTOR-76816 A stability fix for the hypervisor. Vulnerability id: VSTOR-78893 Reading erasure coding files over RD...
