CVE-2026-108471: Incomplete List of Disallowed Inputs

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-102211: Use After Free

Use after free in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-102211: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Use after free in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

PT-2026-111921

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description A use-after-free condition in the Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-108130: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-108130: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

PT-2026-112009

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description A heap-based buffer overflow occurs in the Windows Virtualization-Based Security VBS Enclave. This issue allows an authorized attacker to elevate...

PT-2026-112031

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description An untrusted pointer dereference in the Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.21 Images

Red Hat OpenShift Virtualization release v4.21 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.14 Images

Red Hat OpenShift Virtualization release v4.14 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Moderate: Red Hat Security Advisory: OpenShift Virtualization v4.12 Images

Red Hat OpenShift Virtualization release v4.12 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

TencentOS Server 4: linux-firmware (TSSA-2026:1080)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1080 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

haaukins

Haaukins Haaukins es una plataforma de virtualización altamente accesible y automatizada para la educación en seguridad. Tiene tres componentes principales Docker, Virtualbox y Golang. La comunicación y orquestación entre los componentes se gestiona mediante el lenguaje de programación Go. La raz...

ad-honeypot-autodeploy

ad-honeypot-autodeploy Despliega un pequeño dominio de Windows, intencionadamente inseguro y vulnerable, para un RDP Honeypot de forma totalmente automática. Se ejecuta en virtualización autogestionada usando libvirt con QEMU/KVM pero se puede personalizar fácilmente para soluciones basadas en la...

Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (September 2026 - Part 2 of 2)

Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2026-69153 DESCRIPTION: PostCSS takes a CSS file and provides an API to...

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

A flaw was found in the Kernel-based Virtual Machine KVM for x86. This vulnerability occurs when KVM incorrectly re-checks Level 1 L1 intercepts during the completion of userspace I/O emulation for a Level 2 L2 instruction. If the L1 or host userspace modifies I/O interception settings during thi...

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

A flaw was found in the Kernel-based Virtual Machine KVM for x86. This vulnerability occurs when KVM incorrectly re-checks Level 1 L1 intercepts during the completion of userspace I/O emulation for a Level 2 L2 instruction. If the L1 or host userspace modifies I/O interception settings during thi...

Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (September 2026 - Part 1 of 2)

Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2026-59869 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From...

Trusted Execution Environment Privilege Escalation

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to the swapping of non-trusted pointers. Exploiting this vulnerability can allow attackers to enhance their privileges...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.4.5 security update

Updated Red Hat Enterprise Linux AI 3.4.5 container disk images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat...