Microsoft Virtual Hard Disk (VHDX) 11 - Remote Code Execution (RCE)

Titles: Microsoft Virtual Hard Disk VHDX 11 - Remote Code Execution RCE Author: nu11secur1ty Date: 07/23/2025 Vendor: Microsoft Software: https://www.microsoft.com/en-us/windows/windows-11?r=1 Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-49683 Base Score: 7.8 HIGHVector:...

CVE-2025-23285

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23290

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global GPU metrics which may be influenced by work in other VMs. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2025-23284

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause a stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, or data tampering...

CVE-2025-23290

CVE-2025-23290 affects NVIDIA vGPU software and its Virtual GPU Manager. A vulnerability in the Virtual GPU Manager could let a guest VM read global GPU metrics influenced by other VMs, leading to information disclosure. The Red Hat/NVD/NVIDIA advisories confirm the issue and list affected compon...

CVE-2025-23290

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global GPU metrics which may be influenced by work in other VMs. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2025-23290

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global GPU metrics which may be influenced by work in other VMs. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2025-23285

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23285

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23285

CVE-2025-23285 affects NVIDIA vGPU software’s Virtual GPU Manager. The vulnerability allows a guest VM to access global resources, potentially causing a denial of service. This is discussed across multiple sources (NVIDIA/NVD entries and Red Hat). Remediation is via security updates released by N...

CVE-2025-23283

NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

CVE-2025-23283

CVE-2025-23283 affects NVIDIA vGPU software for Linux-type hypervisors, with a vulnerability in the Virtual GPU Manager that can be triggered by a malicious guest to cause a stack buffer overflow. The result could enable code execution, denial of service, privilege escalation, information disclos...

CVE-2025-23283

NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

PT-2025-31755 · Nvidia · Nvidia Vgpu

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software affected versions not specified Description: NVIDIA vGPU software contains an issue in the Virtual GPU Manager that allows a guest to obtain global GPU metrics potentially influenced by other virtual machines. A successfu...

CVE-2025-23290: Exposure of Sensitive Information to an Unauthorized Actor

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global GPU metrics which may be influenced by work in other VMs. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2025-23285: Incorrect Permission Assignment for Critical Resource

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23284: Stack-based Buffer Overflow

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause a stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, or data tampering...

CVE-2025-23283: Stack-based Buffer Overflow

NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

Security update for kernel-livepatch-MICRO-6-0_Update_2

This update for kernel-livepatch-MICRO-6-0Update2 fixes the following issues: CVE-2024-50208: RDMA/bnxtre: Fix a bug while setting up Level-2 PBL pages bsc1233118 CVE-2024-50250: fsdax: daxunshareiter needs to copy entire blocks bsc1233227 CVE-2024-53146: NFSD: prevent a potential integer overflo...

SUSE-SU-2025:20540-1 Security update for kernel-livepatch-MICRO-6-0_Update_2

This update for kernel-livepatch-MICRO-6-0Update2 fixes the following issues: - CVE-2024-50208: RDMA/bnxtre: Fix a bug while setting up Level-2 PBL pages bsc1233118 - CVE-2024-50250: fsdax: daxunshareiter needs to copy entire blocks bsc1233227 - CVE-2024-53146: NFSD: prevent a potential integer...