cbcvebase.

Ibm Powervm Vios vulnerabilities

146 known vulnerabilities affecting ibm/powervm_vios.

Total CVEs
146
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL44HIGH77MEDIUM22LOW3

Vulnerabilities

Page 7 of 8
CVE-2026-16914P3MEDIUMCVSS 6.7v4.12026-08-19
CVE-2026-16914 [MEDIUM] CWE-787 CVE-2026-16914: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write.
nvd
CVE-2026-16951P3MEDIUMCVSS 6.7v4.12026-08-20
CVE-2026-16951 [MEDIUM] CWE-787 CVE-2026-16951: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow.
nvd
CVE-2026-16935P3HIGHCVSS 7.0v4.12026-08-20
CVE-2026-16935 [HIGH] CWE-367 CVE-2026-16935: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use (TOCTOU) race condition.
nvd
CVE-2026-16833P4MEDIUMCVSS 5.3v4.12026-08-19
CVE-2026-16833 [MEDIUM] CWE-125 CVE-2026-16833: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memor IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read.
nvd
CVE-2026-16838P4HIGHCVSS 7.0v4.12026-08-19
CVE-2026-16838 [HIGH] CWE-367 CVE-2026-16838: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical fil IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensitive information due to a time-of-check to time-of-use (TOCTOU) race condition.
nvd
CVE-2026-16827P4MEDIUMCVSS 5.9v4.12026-08-19
CVE-2026-16827 [MEDIUM] CWE-908 CVE-2026-16827: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer.
nvd
CVE-2026-17007P4HIGHCVSS 7.1v4.12026-08-20
CVE-2026-17007 [HIGH] CWE-125 CVE-2026-17007: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive infor IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.
nvd
CVE-2026-16973P4MEDIUMCVSS 5.5v4.12026-08-20
CVE-2026-16973 [MEDIUM] CWE-200 CVE-2026-16973: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive ker IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read.
nvd
CVE-2026-16846P4MEDIUMCVSS 6.5v4.12026-08-19
CVE-2026-16846 [MEDIUM] CWE-476 CVE-2026-16846: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a null pointer dereference.
nvd
CVE-2026-16883P4MEDIUMCVSS 5.5v4.12026-08-19
CVE-2026-16883 [MEDIUM] CWE-125 CVE-2026-16883: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive infor IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.
nvd
CVE-2026-17195P4MEDIUMCVSS 6.5v4.12026-08-20
CVE-2026-17195 [MEDIUM] CWE-787 CVE-2026-17195: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write.
nvd
CVE-2026-16866P4MEDIUMCVSS 4.8v4.12026-08-19
CVE-2026-16866 [MEDIUM] CWE-125 CVE-2026-16866: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
nvd
CVE-2026-16829P4MEDIUMCVSS 5.3v4.12026-08-19
CVE-2026-16829 [MEDIUM] CWE-476 CVE-2026-16829: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.
nvd
CVE-2026-16855P4MEDIUMCVSS 5.5v4.12026-08-19
CVE-2026-16855 [MEDIUM] CWE-787 CVE-2026-16855: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a heap buffer overflow.
nvd
CVE-2026-16886P4MEDIUMCVSS 4.3v4.12026-08-19
CVE-2026-16886 [MEDIUM] CWE-787 CVE-2026-16886: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
nvd
CVE-2026-16980P4MEDIUMCVSS 5.5v4.12026-08-20
CVE-2026-16980 [MEDIUM] CWE-59 CVE-2026-16980: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper validation of symbolic links.
nvd
CVE-2026-18822P4MEDIUMCVSS 5.5v4.12026-08-20
CVE-2026-18822 [MEDIUM] CWE-400 CVE-2026-18822: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption when parsing directory records.
nvd
CVE-2026-16952P4MEDIUMCVSS 5.5v4.12026-08-20
CVE-2026-16952 [MEDIUM] CWE-400 CVE-2026-16952: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption.
nvd
CVE-2026-19653P4MEDIUMCVSS 5.5v4.12026-08-19
CVE-2026-19653 [MEDIUM] CWE-400 CVE-2026-19653: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations.
nvd
CVE-2026-17009P4MEDIUMCVSS 5.5v4.12026-08-20
CVE-2026-17009 [MEDIUM] CWE-476 CVE-2026-17009: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference.
nvd
Ibm Powervm Vios vulnerabilities | cvebase