https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T08:42:41.459107+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-09093 bdu:2024-09093 2026-10-08T08:42:41.597146+00:00 bdu:2024-09093 https://cve.radiocsirt.org/vuln/bell-cve-2023-1386 BELL-CVE-2023-1386 2026-10-08T08:42:41.597186+00:00

Affected: Alpaquita:23: qemu, Alpaquita:stream: qemu

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0316 certfr-2026-avi-0316 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-08T08:42:41.597217+00:00 certfr-2026-avi-0316 https://cve.radiocsirt.org/vuln/cnvd-2023-61011 cnvd-2023-61011 2026-10-08T08:42:41.597234+00:00 cnvd-2023-61011 https://cve.radiocsirt.org/vuln/euvd-2026-188443 EUVD-2026-188443 2026-10-08T08:42:41.597246+00:00 EUVD-2026-188443 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1386 fkie_cve-2023-1386 2026-10-08T08:42:41.597256+00:00

A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host.

 https://cve.radiocsirt.org/vuln/ghsa-ppj8-867g-rgjr GHSA-ppj8-867g-rgjr 2026-10-08T08:42:41.597295+00:00

A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host.

 https://cve.radiocsirt.org/vuln/gsd-2023-1386 gsd-2023-1386 2026-10-08T08:42:41.597336+00:00 gsd-2023-1386 https://cve.radiocsirt.org/vuln/msrc_cve-2023-1386 msrc_CVE-2023-1386 — Qemu: 9pfs: suid/sgid bits not dropped on file write 2026-10-08T08:42:41.597348+00:00 msrc_CVE-2023-1386 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1386 UBUNTU-CVE-2023-1386 2026-10-08T08:42:41.597364+00:00

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:16.04:LTS: qemu, Ubuntu:Pro:18.04:LTS: qemu, Ubuntu:Pro:20.04:LTS: qemu, Ubuntu:22.04:LTS: qemu, Ubuntu:24.04:LTS: qemu, Ubuntu:25.10: qemu, Ubuntu:26.04:LTS: qemu, Ubuntu:26.04:LTS: qemu-hwe

A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1836 WID-SEC-W-2023-1836 — QEMU: Schwachstelle ermöglicht Privilegieneskalation 2026-10-08T08:42:41.597405+00:00

Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um seine Privilegien zu erhöhen.