CVE-2021-21975

CVE-2021-21975 检测漏洞 CVE-2021-21975 的 Nmap 脚本 漏洞参考： https://app.howlermonkey.io/vulnerabilities/CVE-2021-21975 https://www.vmware.com/security/advisories/VMSA-2021-0004.html 博客 https://www.guayoyo.io/post/cve-2021-21975-vmware-vrealize-operations-manager-ssrf-lo-que-necesitas-saber 示例 nmap -p443...

vmxnet3Hunter

摘要： vmxnet3Hunter 将查找所有运行 vmxnet3 适配器的虚拟机，并将其父集群标记为易受最近 vmEscape 公告影响。 VMware 公告：https://www.vmware.com/security/advisories/VMSA-2018-0027.html CVE：CVE-2018-6981，CVE-2018-6982...

DEBIAN-CVE-2026-90040

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

CVE-2026-90040

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

CVE-2026-90040

CVE-2026-90040 affects the Linux kernel KVM SEV-SNP (AMD Secure Nested Paging) subsystem. When the backing guest_memfd page for the guest-provided VMSA (Virtual Machine State Area) is invalidated (e.g., via PUNCH_HOLE or memslot deletion/move), KVM fails to invalidate the vCPU's cached control.vm...

EUVD-2026-80648

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

CVE-2026-90040 KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

CVE-2026-90040 KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

CVE-2026-90040: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

Linux Distros Unpatched Vulnerability : CVE-2026-90040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to...

VMware Fusion 25H2, 26H1.x < 26H1u1 Multiple Vulnerabilities (VMSA-2026-0007)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 25H2, 26H1.x prior to 26H1u1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

VMware Workstation 25H2, 26H1.x < 26H1u1 Multiple Vulnerabilities (VMSA-2026-0007)

The version of VMware Workstation installed on the remote host is 25H2, 26H1.x prior to 26H1u1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...

VMware ESX 8.0 / 9.0 / 9.1 Insufficient Logging (VMSA-2026-0006)

The version of VMware ESX installed on the remote host is 8.0 prior to build 25429389 8.0 Update 3j, or 9.0 prior to build 25595025 9.0.2.0100, or 9.1 prior to build 25370933 9.1.0.0. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware ESX contai...

VMware vCenter Server 8.0 < 8.0 U3k / 9.0.x < 9.0.2.0100 / 9.1.x < 9.1.0.0200 Authentication Bypass (VMSA-2026-0006)

The version of VMware vCenter Server installed on the remote host is 8.0 prior to 8.0 Update 3k, or 9.0.x prior to 9.0.2.0100, or 9.1.x prior to 9.1.0.0200. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware vCenter contains an authentication...

CVE-2026-72286

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs. The proper migration requires additional SNP-specific state such as...

PT-2026-72474

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM SEV implementation where intra-host migration and mirroring are not fully supported for SEV-SNP VMs. Proper migration of these VMs requires the transfer or...

VMware Workstation/Fusion NAT vulnerability: a guest VM admin can disrupt or intercept other guest VMs' network connections

VMware Workstation/Fusion NAT Network Packet Management Flaw Allows a Guest VM to Disrupt or Intercept Other Guest VMs' Network Connections CVE-2026-22715 Vulnerability Overview VMware Workstation and Fusion contain a logic flaw CWE-923, communication channel not correctly restricted to intended...

VMware Workstation 25.x < 26.0.0 Vulnerability (VMSA-2026-0006)

The version of VMware Workstation installed on the remote host is 25.x 25H2 prior to 26.0.0 26H1. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

Linux Distros Unpatched Vulnerability : CVE-2026-31591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish Lock all vCPUs when synchronizing and encrypting VMSAs for SNP guests, as allowing...

Linux Distros Unpatched Vulnerability : CVE-2026-31593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU Reject synchronizing vCPU state to its associated VMSA if the vCPU has already been...