GHSA-FVVW-8GW5-VW5F vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-vmware, linux-gcp, linux-qemu...

GHSA-4GX5-8RX4-VXMJ vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-vmware, linux-gcp, linux-qemu...

GHSA-JG3H-4JH8-MFWR vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-vmware, linux-gcp, linux-qemu...

GHSA-H53C-6597-VMFW vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-vmware, linux-gcp, linux-qemu...

GHSA-6447-4W47-GH9G vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-vmware, linux-gcp, linux-qemu...

GHSA-P3HP-QCHJ-85WC vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-vmware, linux-gcp, linux-qemu...

CVE-2026-31579 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-vmware, linux-gcp, linux-qemu...

CVE-2026-31591 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-vmware, linux-gcp, linux-qemu...

GHSA-VP8V-GJJ6-F34X vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-vmware, linux-gcp, linux-qemu...

Photon OS 5.0: Chromium PHSA-2026-5.0-0850

An update of the chromium package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0850. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

OESA-2026-2311 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Return the correct value in vmwtranslateptr functions Before the referenced fixes these functions used a lookup function that returned a pointer. Thi...

CVE-2026-41702

VMware Fusion contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is install...

CVE-2026-41702 TOCTOU local privilege escalation vulnerability

VMware Fusion contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is install...

EUVD-2026-30510

VMware Fusion contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is install...

CVE-2026-41702 TOCTOU local privilege escalation vulnerability

VMware Fusion contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is install...

CVE-2026-41702

VMware Fusion is affected by a local privilege escalation TOCTOU flaw in a SETUID binary (CVE-2026-41702). The issue allows a non-administrative local user to escalate to root on systems with Fusion installed. Connected advisories confirm a fix in Fusion 26H1; the remediation is to apply the 26H1...

CVE-2026-41702

VMware Fusion contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is install...

VMware Fusion 安全漏洞

VMware Fusion is a virtual machine software developed by VMware Corporation in the United States, designed specifically for running Windows applications on Apple machines. VMware Fusion has a security vulnerability, which stems from an TOCTOU issue during the execution of SETUID binary files. Thi...

CVE-2025-62627

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...

CVE-2025-62623

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...