How many QEMU qemu-kvm CVEs are in CISA KEV?

None of QEMU qemu-kvm's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for QEMU qemu-kvm vulnerabilities?

Yes — 1 of QEMU qemu-kvm's CVEs have a known public exploit.

Which versions of QEMU qemu-kvm are affected?

1 distinct QEMU qemu-kvm version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in QEMU qemu-kvm CVEs?

QEMU qemu-kvm's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-787 (Out-of-bounds Write).

What is the average severity of QEMU qemu-kvm CVEs?

The average CVSS base score across QEMU qemu-kvm's scored CVEs is 7.2.

QEMU qemu-kvm Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: QEMU qemu-kvm vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

QEMU qemu-kvm Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

QEMU qemu-kvm has 2 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

Severity and exploitation

How the CVSS severity of QEMU qemu-kvm's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of QEMU qemu-kvm's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of QEMU qemu-kvm's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every QEMU qemu-kvm version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 3.0.01 CVE

Find a version

2 CVEs

Sort

Qemu-kvm: 'qemu-img info' leads to host file read/write
CVE-2024-4467
Patch
CWE-787
High · CVSS 7.8
EPSS 0.3% (25th pct)2024-07-02
Medium vulnerability · 2018-10-16
CVE-2018-10839
Public exploit
Patch
CWE-121
Medium · CVSS 6.5
EPSS 3.1% (87th pct)2018-10-16

Common weakness types

The CWE weakness categories most often found in QEMU qemu-kvm CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many QEMU qemu-kvm CVEs were published each year.

2018

2024

Other QEMU products

Browse vulnerabilities for other products by QEMU.

qemu435 CVEs Qemu:4 CVEs display1 CVEs e1000e NIC emulation1 CVEs QEMU built-in VNC server1 CVEs QEMU IDE Controller Component1 CVEs qemu-img1 CVEs QEMU NBD Server1 CVEs

Frequently asked questions

Common questions about QEMU qemu-kvm vulnerabilities.

How many CVEs does QEMU qemu-kvm have?: QEMU qemu-kvm has 2 published CVE records since 2018.
How many QEMU qemu-kvm CVEs are in CISA KEV?: None of QEMU qemu-kvm's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for QEMU qemu-kvm vulnerabilities?: Yes — 1 of QEMU qemu-kvm's CVEs have a known public exploit.
Which versions of QEMU qemu-kvm are affected?: 1 distinct QEMU qemu-kvm version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in QEMU qemu-kvm CVEs?: QEMU qemu-kvm's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-787 (Out-of-bounds Write).
What is the average severity of QEMU qemu-kvm CVEs?: The average CVSS base score across QEMU qemu-kvm's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track QEMU qemu-kvm vulnerabilities

Get an alert for each new QEMU qemu-kvm CVE, with AI-written analysis and remediation steps.

Create an account See pricing