redhat virtualization
productUScpe:2.3:o:redhat:virtualization:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
critical
by severity
0critical6high0medium0low
updated 2026-10-30
01
vulnerabilities (6)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2018-1000180US | high7.5OT elevated | — | ||||
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-l… | ||||||
| CVE-2019-3879US | high8.1OT elevated | — | ||||
It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be perfo… | ||||||
| CVE-2019-14816US | high7.8 | — | ||||
There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of serv… | ||||||
| CVE-2019-10168US | high7.8 | — | ||||
The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the pr… | ||||||
| CVE-2019-10167US | high7.8OT elevated | — | ||||
The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulation… | ||||||
| CVE-2019-10166US | high7.8 | — | ||||
It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would perm… | ||||||
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-284Improper Access Control3 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory2 CVEs
- CWE-250Execution with Unnecessary Privileges2 CVEs
- CWE-829Inclusion of Functionality from Untrusted Control Sphere2 CVEs
- CWE-862Missing Authorization2 CVEs
- CWE-120Buffer Copy without Checking Size of Input1 CVEs
- CWE-122Heap-based Buffer Overflow1 CVEs
- CWE-310CWE-3101 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE6 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan