88661 matches found
EUVD-2026-62875
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write...
CVE-2026-16873 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write...
CVE-2026-16873
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 suffer from an out-of-bounds write enabling local privilege escalation (CVSS 7.8 HIGH). No exploitation details or patch versions are provided in the documents; see IBM support reference for updates.
CVE-2026-16872
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack-based buffer overflow exploitable over the network with no authentication, allowing arbitrary code execution (CVSS 9.8 Critical). IBM's support page is the primary reference; no exploit code or in-the-wild activity is documented. No patch detai...
CVE-2026-16872 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
EUVD-2026-62756
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-16869 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables...
EUVD-2026-62755
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables...
CVE-2026-16869
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are affected by a local privilege escalation flaw caused by improperly scrubbed environment variables, allowing low-privilege local attackers to execute arbitrary code with HIGH confidentiality, integrity, and availability impact (CVSS 7.8). No exploitation de...
CVE-2026-16724 Power System Integer Overflow
IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface VMI. An attacker with authenticated administrator-level access can cause the VMI to crash. Th...
EUVD-2026-62754
IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface VMI. An attacker with authenticated administrator-level access can cause the VMI to crash. Th...
CVE-2026-16724
IBM Power Systems firmware running the Virtualization Management Interface (VMI) is vulnerable to CWE-190 integer overflow, classified CVSS 4.5 (Medium). Authenticated administrators can crash the VMI, which auto-restarts, but repeated exploitation could cause sustained availability impact. Affec...
CVE-2026-16866
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to an out-of-bounds read exploitable remotely (CVSS 4.8, HIGH complexity, no privileges) causing denial of service. IBM's support page (referenced) may contain patch details. No exploitation or in-the-wild activity is documented in the provided ...
CVE-2026-16866 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
EUVD-2026-62753
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
CVE-2026-16865 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection...
EUVD-2026-62752
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection...
CVE-2026-16865
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a command injection flaw allowing unauthenticated remote attackers (CVSS 8.8, HIGH) to execute arbitrary code with full confidentiality, integrity, and availability impact. Exploitation details are not provided. Refer to IBM support page for patch info...