GHSA-V974-2CJF-22Q5 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

GHSA-M3W5-78CH-J8HG vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-qemu, linux-qemu-melange, linux-aws, linux-gcp...

CVE-2026-43174 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-qemu, linux-qemu-melange, linux-aws, linux-gcp...

CVE-2026-43120 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-vmware, linux-qemu, linux-aws, linux-gcp...

GHSA-74JP-62V9-RVJF vulnerabilities

Vulnerabilities for packages: linux-azure, linux-vmware, linux-qemu, linux-aws, linux-gcp...

GHSA-7G25-3CHF-PPWR vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

GHSA-86C9-4W26-QF4C vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

GHSA-FGQH-8XWQ-C3JP vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware...

PT-2026-40932

Name of the Vulnerable Software and Affected Versions VMware Fusion versions prior to 26H1 Description VMware Fusion contains a TOCTOU Time-of-check Time-of-use race condition that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user...

VMSA-2026-0003: VMware Fusion updates address privilege escalation vulnerability (CVE-2026-41702)

Advisory ID: | VMSA-2026-0003 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.8 Synopsis: | VMware Fusion updates address privilege escalation vulnerability CVE-2026-41702 Issue date: | 2026-05-14 Updated on: | 2026-05-14 Initial Advisory CVEs | CVE-2026-41702 1. Impacted Products VMware...

CVE-2025-62623

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2025-62624

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2025-62627

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...

CVE-2025-62627

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...

CVE-2025-62627

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...

CVE-2025-62627

Vulnerability CVE-2025-62627 describes an untrusted pointer dereference in AMD Ionic cloud driver used with VMware ESXi/ESX hosts (AMD-Pensando DPU integration). This could allow an unprivileged VM to read kernel memory or memory of co-located VMs, exposing confidentiality and impacting availabil...

CVE-2025-62627

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...

CVE-2025-62624

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2025-62624

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2025-62624

CVE-2025-62624 is a heap-based buffer overflow in the AMD Ionic cloud driver used with VMware ESXi that can enable privilege escalation and potentially arbitrary code execution on affected ESX hosts. Connected sources also reference CVE-2025-62623 and CVE-2025-62627 in the same Ionic driver famil...