Known Vulnerabilities for products from QEMU
Listed below are 20 of the newest known vulnerabilities associated with the vendor "QEMU".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100839 json | Not Provided | 2026-09-27 | 2026-10-08 | |
| CVE-2026-99204 json | Not Provided | 2026-10-28 | 2026-10-30 | |
| CVE-2026-99191 json | Not Provided | 2026-10-28 | 2026-10-30 | |
| CVE-2026-99181 json | Not Provided | 2026-10-28 | 2026-10-30 | |
| CVE-2026-99176 json | Not Provided | 2026-10-28 | 2026-10-30 | |
| CVE-2026-99153 json | Not Provided | 2026-10-28 | 2026-10-31 | |
| CVE-2026-99152 json | Not Provided | 2026-10-28 | 2026-10-31 | |
| CVE-2026-99127 json | Not Provided | 2026-10-28 | 2026-10-30 | |
| CVE-2026-99103 json | Not Provided | 2026-10-28 | 2026-10-30 | |
| CVE-2026-99040 json | Not Provided | 2026-10-23 | 2026-10-30 | |
| CVE-2024-8354 json | A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get t... | Not Provided | 2024-09-19 | 2026-11-06 |
| CVE-2024-6505 json | A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirect... | Not Provided | 2024-07-05 | 2026-11-06 |
| CVE-2024-3567 json | A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when... | Not Provided | 2024-04-10 | 2026-11-05 |
| CVE-2024-3447 json | A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` ... | Not Provided | 2024-11-14 | 2026-05-12 |
| CVE-2023-42467 json | QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_... | 5.5 - MEDIUM | 2023-09-11 | 2023-11-04 |
| CVE-2023-40360 json | QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether ... | 5.5 - MEDIUM | 2023-08-14 | 2023-09-15 |
| CVE-2023-6693 json | A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtio_ne... | Not Provided | 2024-01-02 | 2026-11-05 |
| CVE-2023-6683 json | A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemu_clipboard_request() functi... | Not Provided | 2024-01-12 | 2026-11-05 |
| CVE-2023-5088 json | A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 in... | Not Provided | 2023-11-03 | 2026-11-07 |
| CVE-2023-4135 json | A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an off... | 6.5 - MEDIUM | 2023-08-04 | 2023-11-07 |
Known software with vulnerabilities from QEMU
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Qemu | Qemu | - |