https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:55:02.742943+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-372769 EUVD-2026-372769 2026-10-03T19:55:02.826253+00:00 EUVD-2026-372769 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81627 fkie_cve-2026-81627 2026-10-03T19:55:02.826304+00:00

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset D_LCK protection and injecting code into System Management Mode memory.

 https://cve.radiocsirt.org/vuln/ghsa-x7v7-qcr5-q66r GHSA-x7v7-qcr5-q66r 2026-10-03T19:55:02.826341+00:00

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset D_LCK protection and injecting code into System Management Mode memory.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-81627 msrc_CVE-2026-81627 — Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram 2026-10-03T19:55:02.826360+00:00 msrc_CVE-2026-81627 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-81627 UBUNTU-CVE-2026-81627 2026-10-03T19:55:02.826381+00:00

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:16.04:LTS: qemu, Ubuntu:Pro:18.04:LTS: qemu, Ubuntu:Pro:20.04:LTS: qemu, Ubuntu:22.04:LTS: qemu, Ubuntu:24.04:LTS: qemu, Ubuntu:26.04:LTS: qemu, Ubuntu:26.04:LTS: qemu-hwe

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset D_LCK protection and injecting code into System Management Mode memory.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3456 WID-SEC-W-2026-3456 — QEMU: Schwachstelle ermöglicht Codeausführung 2026-10-03T19:55:02.826422+00:00

Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um beliebigen Programmcode auszuführen.