Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Total 8804 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-16925 1 Ibm 2 Aix, Vios 2026-08-24 N/A 7.1 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization.
CVE-2026-16927 1 Ibm 2 Aix, Vios 2026-08-24 N/A 7.3 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use (TOCTOU) race condition.
CVE-2026-16928 1 Ibm 2 Aix, Vios 2026-08-24 N/A 7.5 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.
CVE-2026-16932 1 Ibm 2 Aix, Vios 2026-08-24 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable.
CVE-2026-16930 1 Ibm 38 Power System E1050 \(9043-mrx\), Power System E1050 \(9043-mrx\) Firmware, Power System E1080 \(9080-hex\) and 35 more 2026-08-24 N/A 8.2 HIGH
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.
CVE-2026-16989 1 Ibm 2 Aix, Vios 2026-08-24 N/A 7.1 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper resolution of symbolic links.
CVE-2026-17015 1 Ibm 1 I 2026-08-24 N/A 5.4 MEDIUM
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read.
CVE-2026-18102 1 Ibm 1 I 2026-08-24 N/A 3.5 LOW
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking.
CVE-2025-36254 1 Ibm 4 Ds8900f, Ds8900f Firmware, Ds8a00 and 1 more 2026-08-24 N/A 7.4 HIGH
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial of service.
CVE-2025-36398 1 Ibm 4 Ds8900f, Ds8900f Firmware, Ds8a00 and 1 more 2026-08-24 N/A 5.4 MEDIUM
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename.
CVE-2025-36255 1 Ibm 4 Ds8900f, Ds8900f Firmware, Ds8a00 and 1 more 2026-08-24 N/A 7.5 HIGH
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions.
CVE-2026-17121 1 Ibm 2 Aix, Vios 2026-08-24 N/A 7.5 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
CVE-2026-16980 1 Ibm 2 Aix, Vios 2026-08-24 N/A 6.3 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper validation of symbolic links.
CVE-2026-16973 1 Ibm 2 Aix, Vios 2026-08-24 N/A 5.5 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read.
CVE-2026-16972 1 Ibm 2 Aix, Vios 2026-08-24 N/A 6.5 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication.
CVE-2026-16958 1 Ibm 2 Aix, Vios 2026-08-24 N/A 6.5 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
CVE-2026-16952 1 Ibm 2 Aix, Vios 2026-08-24 N/A 5.5 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-16951 1 Ibm 2 Aix, Vios 2026-08-24 N/A 6.7 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow.
CVE-2026-16946 1 Ibm 2 Aix, Vios 2026-08-24 N/A 7.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap buffer overflow.
CVE-2026-16944 1 Ibm 2 Aix, Vios 2026-08-24 N/A 6.7 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow.