Virtualization

56 results · Clear filters · Feed

• Critical 9.8
  CVE-2023-54391 Public exploit

  Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter

  Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to authenticate as any existing enabled user without a configured second factor by sup…

  Proxmox Server Solutions Proxmox Virtual Environment (VE) Virtualization
  Sep 1, 2026
• Critical 9.8
  CVE-2026-59310 Exploited · Ransomware Public exploit EPSS 62%

  vCenter directory-traversal vulnerability

  VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

  VMware Telco Cloud Platform Cloud Foundation Telco Cloud Infrastructure Virtualization
  Jul 30, 2026

  KEV Aug 18, 2026
• High 7.1
  CVE-2026-21986 Public exploit

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jan 20, 2026
• High 8.2
  CVE-2026-21955 Public exploit

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jan 20, 2026
• High 8.2
  CVE-2025-62641 Public exploit

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Oct 21, 2025
• High 8.2
  CVE-2025-53024 Public exploit

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jul 15, 2025
• Medium 4.3
  CVE-2025-41228 Public exploit

  VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability

  VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal co…

  VMware ESXi Cloud Foundation Telco Cloud Platform Virtualization
  May 20, 2025
• High 8.1
  CVE-2025-30712 Public exploit

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 15, 2025
• Medium 6.8
  CVE-2024-37085 Exploited · Ransomware Public exploit EPSS 27%

  VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) pe…

  Virtualization
  Jun 25, 2024

  KEV Jul 30, 2024
• High 7.8
  CVE-2024-37081 Public exploit

  The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An aut…

  Virtualization
  Jun 18, 2024
• Medium 4.9
  CVE-2024-22275 Public exploit

  The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the …

  Virtualization
  May 21, 2024
• High 7.2
  CVE-2024-22274 Public exploit

  The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative…

  Virtualization
  May 21, 2024
• High 7.8
  CVE-2024-21111 Public exploit

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 16, 2024
• Medium 6.7
  CVE-2024-21107 Public exploit

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 16, 2024
• Medium 5.7
  CVE-2024-2193 Public exploit

  Speculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.

  A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the …

  AMD Xen Xen CPU Virtualization Debian Ubuntu Alpine
  Mar 15, 2024
• High 8.2
  CVE-2023-22098 Public exploit

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Oct 17, 2023
• High 7.8
  CVE-2023-21987 Public exploit

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 18, 2023
• High 8.2
  CVE-2022-31705 Public exploit

  VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI).…

  Virtualization
  Dec 14, 2022
• High 8.1
  CVE-2022-39425 Public exploit

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Oct 18, 2022
• Unscored —
  CVE-2021-3929 Public exploit

  A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE is similar to CVE-202…

  qemu qemu Virtualization Debian Ubuntu
  Aug 25, 2022
• Medium 6.5
  CVE-2022-22948 Exploited Public exploit EPSS 13%

  The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious ac…

  Virtualization
  Mar 29, 2022

  KEV Jul 17, 2024
• Unscored —
  CVE-2021-3656 Public exploit

  A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VM…

  linux-hwe linux-azure linux-gcp linux Virtualization Debian Ubuntu
  Mar 4, 2022
• Unscored —
  CVE-2021-21980 Public exploit

  The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with …

  Virtualization
  Nov 24, 2021
• Unscored —
  CVE-2021-22006 Public exploit

  The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A malicio…

  Virtualization
  Sep 23, 2021
• Critical 9.8
  CVE-2021-22005 Exploited · Ransomware Public exploit EPSS 100%

  The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with net…

  Virtualization
  Sep 23, 2021

  KEV Nov 3, 2021
• Unscored —
  CVE-2021-22015 Public exploit

  The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files an…

  Virtualization
  Sep 23, 2021
• Unscored —
  CVE-2021-21994 Public exploit

  SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A malicious actor with ne…

  Virtualization
  Jul 13, 2021
• Critical 9.8
  CVE-2021-21985 Exploited · Ransomware Public exploit EPSS 100%

  The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtua…

  Virtualization
  May 26, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-21974 Public exploit EPSS 45%

  OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-S…

  Virtualization
  Feb 24, 2021
• Critical 9.8
  CVE-2021-21972 Exploited · Ransomware Public exploit EPSS 100%

  The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor…

  Virtualization
  Feb 24, 2021

  KEV Nov 3, 2021
• Medium 5.3
  CVE-2021-21973 Exploited Public exploit EPSS 88%

  The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of U…

  Virtualization
  Feb 24, 2021

  KEV Mar 7, 2022
• Medium 6.0
  CVE-2021-2119 Public exploit

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jan 20, 2021
• Critical 9.8
  CVE-2020-3992 Exploited · Ransomware Public exploit EPSS 83%

  OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650…

  Virtualization
  Oct 20, 2020

  KEV Nov 3, 2021
• Unscored —
  CVE-2020-14364 Public exploit

  An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue …

  qemu qemu xen qemu Virtualization Debian Ubuntu Alpine
  Aug 31, 2020
• Critical 9.8
  CVE-2020-3952 Exploited Public exploit EPSS 90%

  Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Serv…

  Virtualization
  Apr 10, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-5544 Exploited · Ransomware Public exploit EPSS 98%

  OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity o…

  openslp-dfsg Virtualization Ubuntu
  Dec 6, 2019

  KEV Nov 3, 2021
• Unscored —
  CVE-2019-2721 Public exploit

  Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Apr 23, 2019
• Unscored —
  CVE-2019-2525 Public exploit

  Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jan 16, 2019
• Unscored —
  CVE-2018-6981 Public exploit

  VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without …

  VMware VMware ESXi, VMware Workstation, and VMware Fusion Virtualization
  Dec 4, 2018
• Unscored —
  CVE-2018-3295 Public exploit

  Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported versio…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Oct 17, 2018