IBM Powervm VIOS vulnerabilities, page 5
146 vulnerabilities
Known vulnerabilities in IBM Powervm VIOS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2026-16825ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.EPSS0.33%CriticalCVE-2026-16882ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.EPSS0.86%HighCVE-2026-16972ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication.EPSS0.37%MediumCVE-2026-16849ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper check for an array index boundary.EPSS0.28%MediumCVE-2026-16833ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read.EPSS0.40%HighCVE-2026-16991ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper handling of symbolic links.EPSS0.14%HighCVE-2026-16821ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability.EPSS0.10%LowCVE-2026-16890ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow.EPSS0.11%CriticalCVE-2026-16872ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.EPSS0.80%HighCVE-2026-16851ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free.EPSS0.31%HighCVE-2026-16925ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization.EPSS0.09%HighCVE-2026-16873ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write.EPSS0.15%CriticalCVE-2026-19437ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.EPSS0.47%HighCVE-2026-19783ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege escalation.EPSS0.11%MediumCVE-2026-19653ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations.EPSS0.10%HighCVE-2026-19442ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.EPSS0.12%HighCVE-2026-19446ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart.EPSS1.03%HighCVE-2026-19448ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service.EPSS0.25%HighCVE-2026-19449ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root.EPSS0.14%HighCVE-2026-14970ibm · aix +2 moreVulnerabilities in IBM AIX and PowerVM VIOSIBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow.EPSS0.46%