Product by Open Source

    Qemu

    7 known vulnerabilities in Qemu (Open Source), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Qemu (Open Source)
    HighCVE-2024-7409

    Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

    also in 17 other products

    		7.5
    HighCVE-2026-93834

    Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape

    also in 9 other products

    		8.8
    HighCVE-2026-81627

    Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram

    also in 9 other products

    		8.2
    HighCVE-2024-6519

    Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability

    also in 7 other products

    		8.2
    HighCVE-2024-3446

    Qemu: virtio: dma reentrancy issue leads to double free vulnerability

    also in 6 other products

    		8.2
    MediumCVE-2025-54566

    QEMU: External Control of Critical State Data

    also in 1 other product

    		4.2
    MediumCVE-2025-54567

    QEMU: Incorrect Provision of Specified Functionality

    also in 1 other product

    		4.2

    All products by Open Source