Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Total 9102 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-18828 1 Ibm 2 Aix, Vios 2026-10-26 N/A 5.4 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow.
CVE-2026-19446 1 Ibm 2 Aix, Vios 2026-10-26 N/A 7.5 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart.
CVE-2026-16847 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
CVE-2026-19783 1 Ibm 2 Aix, Vios 2026-10-26 N/A 6.7 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege escalation.
CVE-2026-16855 1 Ibm 2 Aix, Vios 2026-10-26 N/A 5.5 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a heap buffer overflow.
CVE-2026-16850 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements.
CVE-2026-16972 1 Ibm 2 Aix, Vios 2026-10-26 N/A 6.5 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication.
CVE-2026-16952 1 Ibm 2 Aix, Vios 2026-10-26 N/A 5.5 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-19448 1 Ibm 2 Aix, Vios 2026-10-26 N/A 6.5 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service.
CVE-2026-16917 1 Ibm 2 Aix, Vios 2026-10-26 N/A 9.8 CRITICAL
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow.
CVE-2026-16926 1 Ibm 2 Aix, Vios 2026-10-26 N/A 9.1 CRITICAL
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input.
CVE-2026-18832 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.
CVE-2026-16928 1 Ibm 2 Aix, Vios 2026-10-26 N/A 7.5 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.
CVE-2026-16936 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-16848 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in DHCP options.
CVE-2026-17424 1 Ibm 2 Aix, Vios 2026-10-26 N/A 4.8 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions due to improper limitation of a pathname to a restricted directory.
CVE-2026-16844 1 Ibm 2 Aix, Vios 2026-10-26 N/A 8.8 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-18822 1 Ibm 2 Aix, Vios 2026-10-26 N/A 4.4 MEDIUM
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption when parsing directory records.
CVE-2026-16919 1 Ibm 2 Aix, Vios 2026-10-26 N/A 9.8 CRITICAL
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers.
CVE-2026-16927 1 Ibm 2 Aix, Vios 2026-10-26 N/A 7.3 HIGH
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use (TOCTOU) race condition.