How many CVEs does QEMU have?

QEMU has 434 published CVE records since 2007, including 12 in the last two years.

How many QEMU CVEs are in CISA KEV?

None of QEMU's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which QEMU products have the most CVEs?

The QEMU products with the most published CVEs are qemu, Qemu:, Qemu-kvm, QEMU IDE Controller Component, qemu-img.

What are the most common weakness types in QEMU CVEs?

QEMU's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read), CWE-476 (NULL Pointer Dereference).

Are there public exploits for QEMU vulnerabilities?

Yes — 14 of QEMU's CVEs have a known public exploit.

How many critical QEMU vulnerabilities are there?

QEMU has 18 critical and 132 high-severity CVEs.

What is the average severity of QEMU CVEs?

The average CVSS base score across QEMU's scored CVEs is 6.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

434 CVEs

QEMU Vulnerabilities

Name: QEMU vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for QEMU.

434

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

14

Public exploits

PoC or exploit code

6.3

Avg CVSS

2007–2026

Overview

QEMU has 434 published CVE records since 2007, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 14 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting QEMU products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on QEMU's vulnerability posture, as a share of its 434 published CVEs.

Average CVSS: 6.3
Critical / high: 35%
Actively exploited (KEV): 0%
Public exploit available: 3%
Patch available: 97%

Severity and exploitation

How the CVSS severity of QEMU's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical18

High132

Medium247

Low37

In CISA’s Known Exploited Vulnerabilities catalog

0

None of QEMU's CVEs are currently listed in CISA's KEV catalog.

Public exploits

14

14 of QEMU's CVEs have a known public exploit available.

Most affected products

The QEMU products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in QEMU CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish QEMU CVE records.

Disclosure activity by year

How many QEMU CVEs were published each year.

2019

17

2020

49

2021

26

2022

29

2023

17

2024

14

2025

4

2026

8

Latest QEMU CVEs

The most recently disclosed vulnerabilities affecting QEMU.

Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write
CWE-787
High · CVSS 7.8
EPSS 0.1%2026-07-16
Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)
CWE-122
High · CVSS 7.4
EPSS 0.1%2026-06-19
Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation
CWE-190
Medium · CVSS 5.5
EPSS 0.1%2026-06-19
Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling
CWE-122
Medium · CVSS 6.7
EPSS 0.1%2026-06-12
Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing
CWE-125
Medium · CVSS 5.1
EPSS 0.1%2026-02-19
Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq
CWE-787
Medium · CVSS 6.5
EPSS 0.1%2026-02-18
Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback
CWE-212
Low · CVSS 3.3
EPSS 0.1%2026-02-18
Qemu-kvm: unbounded allocation in virtio-crypto
CWE-770
Medium · CVSS 5.5
EPSS 0.1%2026-02-18
Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode
CWE-121
Medium · CVSS 6.2
EPSS 0.2%2025-10-31
Qemu-kvm: vnc websocket handshake use-after-free
CWE-416
High · CVSS 7.5
EPSS 0.8%2025-10-03
Medium vulnerability · 2025-07-25
CWE-642
Medium · CVSS 5.4
EPSS 0.2%2025-07-25
Medium vulnerability · 2025-07-25
CWE-684
Medium · CVSS 5.4
EPSS 0.2%2025-07-25

Track new QEMU CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor QEMU CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Magento438 CVEs tensorflow434 CVEs cpanel429 CVEs Wikimedia Foundation429 CVEs GPAC426 CVEs MariaDB424 CVEs Palo Alto Networks423 CVEs Rockwell Automation421 CVEs

Browse all vendors

Frequently asked questions

Common questions about QEMU vulnerabilities.

How many CVEs does QEMU have?: QEMU has 434 published CVE records since 2007, including 12 in the last two years.
How many QEMU CVEs are in CISA KEV?: None of QEMU's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which QEMU products have the most CVEs?: The QEMU products with the most published CVEs are qemu, Qemu:, Qemu-kvm, QEMU IDE Controller Component, qemu-img.
What are the most common weakness types in QEMU CVEs?: QEMU's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read), CWE-476 (NULL Pointer Dereference).
Are there public exploits for QEMU vulnerabilities?: Yes — 14 of QEMU's CVEs have a known public exploit.
How many critical QEMU vulnerabilities are there?: QEMU has 18 critical and 132 high-severity CVEs.
What is the average severity of QEMU CVEs?: The average CVSS base score across QEMU's scored CVEs is 6.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track QEMU vulnerabilities

Monitor new QEMU vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing