qemu-kvm
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-4135 | fixed in 8.1.0 | Out-of-bounds read information disclosure vulnerability | MEDIUM 6.5 | 0.4 % | ||
| CVE-2022-26354 | Affected QEMU versions <= 6.2.0 | A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing | LOW 3.2 | 0.4 % | ||
| CVE-2022-26353 | Affected QEMU version: 6.2.0 | A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748, which forgot to un | HIGH 7.5 | 2.7 % |