https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T12:40:54.620744+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-10167 CVE-2019-10167 2026-10-08T12:40:54.657606+00:00

Affected: libvirt

The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.

 https://cve.radiocsirt.org/vuln/usn-4047-1 USN-4047-1 — libvirt vulnerabilities 2026-10-08T12:40:54.657672+00:00

Affected: Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt

Matthias Gerstner and Ján Tomko discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to check for arbitrary files, or execute arbitrary binaries. In the default installation, attackers would be isolated by the libvirt AppArmor profile.