IBM Powervm VIOS vulnerabilities, page 2

146 vulnerabilities

Known vulnerabilities in IBM Powervm VIOS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.3CVE-2026-16822ibmaix+2
EPSS score
0.25%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC policy server and modify traffic due to improper certificate validation.
9.8CVE-2026-16864ibmaix+2
EPSS score
0.80%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
7.5CVE-2026-16924ibmaix+2
EPSS score
0.55%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation.
8.2CVE-2026-16943ibmaix+2
EPSS score
0.12%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow.
8.8CVE-2026-16814ibmaix+2
EPSS score
0.41%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
8.8CVE-2026-16932ibmaix+2
EPSS score
0.19%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable.
7.8CVE-2026-16875ibmaix+2
EPSS score
0.22%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to shell metacharacter injection.
7.5CVE-2026-16824ibmaix+2
EPSS score
0.55%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to unbounded recursion.
7.8CVE-2026-16874ibmaix+2
EPSS score
0.17%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper enforcement of RBAC authentication roles.
7.5CVE-2026-16958ibmaix+2
EPSS score
0.40%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
7.8CVE-2026-16935ibmaix+2
EPSS score
0.07%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use (TOCTOU) race condition.
9.8CVE-2026-16656ibmaix+2
EPSS score
0.72%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication.
4.4CVE-2026-16897ibmaix+2
EPSS score
0.14%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write.
8.8CVE-2026-16911ibmaix+2
EPSS score
0.75%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack buffer overflow.
8.8CVE-2026-16934ibmaix+2
EPSS score
0.15%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap-based buffer overflow.
9.8CVE-2026-16894ibmaix+2
EPSS score
0.80%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
9.6CVE-2026-16903ibmaix+2
EPSS score
0.42%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a denial of service due to an out-of-bounds write.
5.5CVE-2026-16883ibmaix+2
EPSS score
0.15%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.
7.5CVE-2026-16690ibmaix+2
EPSS score
0.55%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
3.3CVE-2026-16891ibmaix+2
EPSS score
0.14%
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.