https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:34:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-350827 EUVD-2026-350827 https://cve.radiocsirt.org/vuln/euvd-2026-350827 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63623 <p>A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.</p> <p>A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-63623 https://cve.radiocsirt.org/vuln/ghsa-m7jx-933m-5cqr <p>A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.</p> <p>A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.</p> https://cve.radiocsirt.org/vuln/ghsa-m7jx-933m-5cqr https://cve.radiocsirt.org/vuln/msrc_cve-2026-63623 msrc_CVE-2026-63623 https://cve.radiocsirt.org/vuln/msrc_cve-2026-63623 https://cve.radiocsirt.org/vuln/oesa-2026-3831 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libvirt</p> <p>Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support. Security Fix(es):</p> <p>A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.(CVE-2026-63623)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libvirt</p> <p>Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support. Security Fix(es):</p> <p>A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.(CVE-2026-63623)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3831 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11455-1 <p>libvirt-12.6.0-1.1 on GA media</p> <p>libvirt-12.6.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11455-1 https://cve.radiocsirt.org/vuln/suse-su-2026:23445-1 <p>Security update for libvirt</p> <p>Security update for libvirt</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23445-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-63623 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libvirt, Ubuntu:Pro:16.04:LTS: libvirt, Ubuntu:Pro:18.04:LTS: libvirt, Ubuntu:Pro:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt, Ubuntu:24.04:LTS: libvirt, Ubuntu:26.04:LTS: libvirt, Ubuntu:26.04:LTS: libvirt-hwe</p> <p>A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libvirt, Ubuntu:Pro:16.04:LTS: libvirt, Ubuntu:Pro:18.04:LTS: libvirt, Ubuntu:Pro:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt, Ubuntu:24.04:LTS: libvirt, Ubuntu:26.04:LTS: libvirt, Ubuntu:26.04:LTS: libvirt-hwe</p> <p>A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-63623 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2724 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in libvirt ausnutzen, um Administratorrechte zu erlangen und vertrauliche Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in libvirt ausnutzen, um Administratorrechte zu erlangen und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2724