IBM Powervm VIOS vulnerabilities, page 3

146 vulnerabilities

Known vulnerabilities in IBM Powervm VIOS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8HighCVE-2026-16901ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.EPSS0.42%9.8CriticalCVE-2026-16862ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.EPSS0.80%5.3MediumCVE-2026-16829ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.EPSS0.25%8.8HighCVE-2026-16844ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.EPSS0.50%6.3MediumCVE-2026-16980ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper validation of symbolic links.EPSS0.10%7.5HighCVE-2026-16852ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow.EPSS0.55%7.5HighCVE-2026-16818ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.EPSS0.55%7.3HighCVE-2026-16927ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use (TOCTOU) race condition.EPSS0.07%3.7LowCVE-2026-16888ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to a path traversal vulnerability.EPSS0.50%8.8HighCVE-2026-16877ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.EPSS0.75%8.8HighCVE-2026-16936ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow.EPSS0.17%7.8HighCVE-2026-16869ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables.EPSS0.17%4.8MediumCVE-2026-16866ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.EPSS0.34%9.1CriticalCVE-2026-16926ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input.EPSS0.56%9.9CriticalCVE-2026-16816ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.EPSS0.79%4.3MediumCVE-2026-16886ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.EPSS0.28%8.8HighCVE-2026-16996ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow.EPSS0.17%5.9MediumCVE-2026-16827ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer.EPSS0.44%6.5MediumCVE-2026-16846ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a null pointer dereference.EPSS0.31%9.8CriticalCVE-2026-16834ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer underflow.EPSS0.62%