423 CVEs
qemu Vulnerabilities
CVE security advisories and vulnerability history for qemu.
423
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
14
Public exploits
With known exploit
6.2
Avg CVSS
2007–2025
Overview
qemu has 423 published CVE records since 2007, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 14 have a known public exploit. The average CVSS base score across scored CVEs is 6.2.
This page aggregates every publicly disclosed vulnerability (CVE) affecting qemu products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
Severity and exploitation
How the CVSS severity of qemu's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical0
High15
Medium34
Low3
371 additional CVEs have no CVSS severity score.