5861 matches found
EUVD-2026-3111
Microsoft Edge Elevation Service exposes a privileged COM interface that inadequately validates the privileges of the calling process. A standard non‑administrator local user can invoke the IElevatorEdge interface method LaunchUpdateCmdElevatedAndWait, causing the service to execute privileged...
CVE-2026-21223
Improper privilege management in Microsoft Edge Chromium-based allows an authorized attacker to bypass a security feature locally...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Improper privilege management in Microsoft Edge Chromium-based allows an authorized attacker to bypass a security feature locally...
SUSE CVE-2025-71104
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer When advancing the target expiration for the guest's APIC timer in periodic mode, set the expiration to "now" if the target expiration is in the past...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003866)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003866 advisory. An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the...
MiracleLinux 7 : qemu-kvm-1.5.3-156.el7.5 (AXSA:2018-3289:06)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-3289:06 advisory. QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams CVE-2018-11806 QEMU: i386: multiboot OOB access while loading kernel image...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001278)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001278 advisory. An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xenfailsafecallback entry point in arch/x86/entry/entry64.S does not...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003705)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003705 advisory. An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003679)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003679 advisory. A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parameter passed to an ioctl was...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001287)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001287 advisory. arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVMSETONREG ioctl. This is exploitable by attackers who can...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001357)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001357 advisory. An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service host OS hang via a high rate...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000732)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000732 advisory. The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003984)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003984 advisory. A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on to...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003622)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003622 advisory. A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parameter passed to an ioctl was...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002961)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002961 advisory. arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVMSETONREG ioctl. This is exploitable by attackers who can...
Linux Distros Unpatched Vulnerability : CVE-2025-71104
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer When advancing the target expiration for the guest's APIC timer in periodic mode,...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003373)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003373 advisory. The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service assertion failure, and hypervisor hang or crash via an out-of...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002816)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002816 advisory. arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVMSETONREG ioctl. This is exploitable by attackers who can...
SEV-SNP Guest Stack Pointer Corruption Vulnerability
Summary Researchers have reported a CPU-caused stack corruption issue caused by flipping an undocumented MSR bit. AMD believes that this vulnerability occurs due to inadequate access controls, which fail to prevent the hypervisor from setting an internal configuration bit. This attack could allow...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002090)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002090 advisory. The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service host OS panic or hang by...