Skip to content
Threat Feed
Subscribe

Product

QEMU

5 briefs RSS
high advisory

Use-After-Free Vulnerability in QEMU 9pfs Subsystem (CVE-2026-93834)

A race condition in QEMU's 9pfs subsystem allows a malicious guest to trigger a use-after-free, enabling directory traversal escapes and potential code execution on the host.

QEMU +1
1t 1c updated
medium advisory

QEMU Memory Corruption and Denial of Service Vulnerability

A vulnerability in QEMU allows a remote, authenticated attacker to trigger memory corruption or a denial-of-service condition, impacting system availability.

QEMU denial-of-service virtualization
1t
high advisory

QEMU Privilege Escalation Vulnerability

A local attacker can exploit a vulnerability in QEMU to elevate their privileges and execute arbitrary code on the host system where QEMU is running.

QEMU privilege-escalation virtualization vulnerability
2t
high advisory

QEMU and libvirt: Multiple Vulnerabilities

Multiple vulnerabilities exist in QEMU and libvirt, which can be exploited by a local attacker to disclose sensitive information and bypass security mechanisms, potentially leading to privilege escalation.

QEMU +1 vulnerability linux virtualization defense-evasion privilege-escalation collection
1t
high advisory

Suspicious QEMU Execution on Windows

Detects the execution of QEMU with the -nographic flag and an image file on Windows systems, a technique used for persistence and initial access by installing a rogue Linux virtual machine.

Splunk Enterprise +3 qemu virtualization persistence linux windows
2r 2t