n/a libvirt

Name: n/a libvirt
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical1high10medium0low

updated 2026-10-27

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-3975US	medium6.5	1.64% (76th)	Exploit	no fix	2022-08-23	≤ Fixed in libvirt v7.1.0
CVE-2020-25637US	medium6.7	0.53% (45th)	Exploit	no fix	2020-10-06	≤ libvirt versions before 6.8.0
CVE-2021-3667US	medium6.5	1.37% (72nd)	—	no fix	2022-03-02	≤ Fixedin - libvert v7.6.0-rc1 and above
CVE-2020-14301US	medium6.5	1.16% (67th)	—	no fix	2021-05-27	≤ libvirt 6.3.0
CVE-2022-0897US	medium4.3	1.05% (64th)	—	no fix	2022-03-25	≤ libvirt 8.0.0-8
CVE-2021-3559US	medium6.5	1.03% (64th)	—	no fix	2021-05-24	≤ libvirt 7.0.0
CVE-2020-10701US	medium6.5OT elevated	0.86% (58th)	—	no fix	2021-05-27	≤ libvirt 6.2.0
CVE-2021-3631US	medium6.3	0.49% (42nd)	—	no fix	2022-03-02	≤ Fixed-In - libvirt v7.5.0
CVE-2020-14339US	high8.8	0.42% (36th)	—	no fix	2020-12-03	≤ libvirt 6.6.0
CVE-2023-2700US	medium5.5	0.25% (17th)	—	no fix	2023-05-15	≤ libvirt-4.5.0
CVE-2021-4147US	medium6.5	0.24% (16th)	—	no fix	2022-03-25	≤ libvirt 2.33.0

The flaw types (CWEs) most of these CVEs share.

CWE-667Improper Locking3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-212Improper Removal of Sensitive Information Before Storage or Transfer1 CVEs
CWE-401Missing Release of Memory after Effective Lifetime1 CVEs
CWE-415Double Free1 CVEs
CWE-416Use After Free1 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource1 CVEs
CWE-772Missing Release of Resource after Effective Lifetime1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.