Ibm Powervm Vios vulnerabilities
146 known vulnerabilities affecting ibm/powervm_vios.
Total CVEs
146
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL44HIGH77MEDIUM22LOW3
Vulnerabilities
Page 5 of 8
CVE-2026-14970P3HIGHCVSS 7.5v4.12026-08-19
CVE-2026-14970 [HIGH] CWE-120 CVE-2026-14970: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registrat
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow.
nvd
CVE-2026-18716P3CRITICALCVSS 9.1v4.12026-08-20
CVE-2026-18716 [CRITICAL] CWE-125 CVE-2026-18716: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.
nvd
CVE-2026-16989P3HIGHCVSS 7.8v4.12026-08-20
CVE-2026-16989 [HIGH] CWE-59 CVE-2026-16989: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper resolution of symbolic links.
nvd
CVE-2026-16943P3HIGHCVSS 7.8v4.12026-08-20
CVE-2026-16943 [HIGH] CWE-787 CVE-2026-16943: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow.
nvd
CVE-2026-17124P3HIGHCVSS 7.8v4.12026-08-20
CVE-2026-17124 [HIGH] CWE-125 CVE-2026-17124: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds read.
nvd
CVE-2026-16874P3HIGHCVSS 7.8v4.12026-08-19
CVE-2026-16874 [HIGH] CWE-269 CVE-2026-16874: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper enforcement of RBAC authentication roles.
nvd
CVE-2026-18842P3HIGHCVSS 7.8v4.12026-08-20
CVE-2026-18842 [HIGH] CWE-787 CVE-2026-18842: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write.
nvd
CVE-2022-35643P3CRITICALCVSS 9.1v3.12022-07-29
CVE-2022-35643 [CRITICAL] CVE-2022-35643: IBM PowerVM VIOS 3.1 could allow a remote attacker to tamper with system configuration or cause a de
IBM PowerVM VIOS 3.1 could allow a remote attacker to tamper with system configuration or cause a denial of service. IBM X-Force ID: 230956.
nvd
CVE-2026-16937P3HIGHCVSS 7.8v4.12026-08-20
CVE-2026-16937 [HIGH] CWE-269 CVE-2026-16937: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management.
nvd
CVE-2026-16991P3HIGHCVSS 7.8v4.12026-08-20
CVE-2026-16991 [HIGH] CWE-269 CVE-2026-16991: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper handling of symbolic links.
nvd
CVE-2026-16703P3HIGHCVSS 7.8v4.12026-08-19
CVE-2026-16703 [HIGH] CWE-269 CVE-2026-16703: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management.
nvd
CVE-2026-16821P3HIGHCVSS 7.8v4.12026-08-28
CVE-2026-16821 [HIGH] CWE-134 CVE-2026-16821: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability.
nvd
CVE-2026-16923P3HIGHCVSS 7.8v4.12026-08-20
CVE-2026-16923 [HIGH] CWE-269 CVE-2026-16923: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management.
nvd
CVE-2026-16958P3HIGHCVSS 7.5v4.12026-08-20
CVE-2026-16958 [HIGH] CWE-787 CVE-2026-16958: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
nvd
CVE-2026-18828P3HIGHCVSS 7.5v4.12026-08-20
CVE-2026-18828 [HIGH] CWE-787 CVE-2026-18828: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow.
nvd
CVE-2026-16706P3HIGHCVSS 7.5v4.12026-08-19
CVE-2026-16706 [HIGH] CWE-787 CVE-2026-16706: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
nvd
CVE-2026-17425P3HIGHCVSS 7.5v4.12026-08-20
CVE-2026-17425 [HIGH] CWE-787 CVE-2026-17425: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack buffer overflow.
nvd
CVE-2026-16928P3HIGHCVSS 7.5v4.12026-08-20
CVE-2026-16928 [HIGH] CWE-122 CVE-2026-16928: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.
nvd
CVE-2026-19448P3HIGHCVSS 7.5v4.12026-08-20
CVE-2026-19448 [HIGH] CWE-908 CVE-2026-19448: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service.
nvd
CVE-2026-17170P3HIGHCVSS 7.5v4.12026-08-20
CVE-2026-17170 [HIGH] CWE-770 CVE-2026-17170: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an allocation size.
nvd