Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007468)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007468 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM...

SUSE-SU-2026:1413-1 Security update for ovmf

This update for ovmf fixes the following issue: - CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting bsc1252441...

Windows Virtualization-Based Security Trust Execution Environment

The vulnerability of the trusted execution environment for the Windows operating system’s Virtualization-Based Security VBS mechanism is related to access control errors. Exploiting this vulnerability can allow a perpetrator to circumvent existing security restrictions...

LUA File Virtualization Filter Driver Privilege Escalation

The vulnerability of the LUA File Virtualization Filter Driver in Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to increase their privileges...

VBS Trusted Execution Environment

The vulnerability of the trusted execution environment for Windows-based Virtualization-Based Security VBS operating systems is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...

EUVD-2026-22607

Improper access control in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

CVE-2026-32220

Improper access control in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

CVE-2026-23670

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

CVE-2026-32220

Improper access control in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

CVE-2026-27929 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-27929 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-27929

CVE-2026-27929 is a Time-of-check Time-of-use (toctou) race condition in Windows LUAFV (LUA File Virtualization Filter Driver) that enables a locally authenticated attacker to elevate privileges. Red Hat and NCSC advisories confirm the Windows LUAFV vulnerability and its local privilege-escalatio...

CVE-2026-23670 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

...

CVE-2026-23670 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

...

CVE-2026-23670

CVE-2026-23670 affects Windows Virtualization-Based Security (VBS) security feature. The issue is a local, high-privilege bypass of VBS protections, with no user interaction required (UI: NONE). Exploitation is possible with local access and may impact confidentiality and integrity (both HIGH), w...

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

UEFI Secure Boot Security Feature Bypass Vulnerability

Improper access control in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally...

PoC

Fabricked: Breaking AMD SEV-SNP via Infinity Fabric !CVE-20...

ROS-20260414-73-0029

A vulnerability in the nestedsvmvmexit function of the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 platform of the Linux operating system kernel is related to an uncontrolled reachable assertion. Exploitation of the vulnerability could allow an attacker to cause a...