Ein Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen und um beliebigen Programmcode auszuführen.
[UPDATE] [kritisch] vm2: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-08 11:26 UTC
- Importiert: 2026-10-09 10:15 UTC
- CVSS: 10.0
- Quelle-ID:
cert_bund - uid_hash:
b98c762d9b07b239788cecde5c2cbfedbe64430718f39aba148cfedf8574c3c9
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
CRITICAL |
10 |
CRITICAL |
9.5 |
2026-09-17 |
|||
CRITICAL |
10 |
CRITICAL |
10 |
2026-09-17 |
|||
CRITICAL |
10 |
CRITICAL |
9.9 |
2026-09-17 |
|||
CRITICAL |
10 |
CRITICAL |
9.9 |
2026-09-17 |
|||
CRITICAL |
10 |
CRITICAL |
10 |
2026-09-17 |
|||
CRITICAL |
10 |
CRITICAL |
10 |
2026-09-17 |
|||
CRITICAL |
10 |
HIGH |
8.7 |
2026-09-17 |
|||
CRITICAL |
10 |
CRITICAL |
9.8 |
2026-09-17 |
|||
CRITICAL |
10 |
MEDIUM |
4.2 |
2026-09-17 |
|||
CRITICAL |
10 |
CRITICAL |
10 |
2026-09-17 |
|||
CRITICAL |
10 |
CRITICAL |
10 |
2026-09-17 |
|||
CRITICAL |
10 |
CRITICAL |
9.9 |
2026-09-17 |
|||
CRITICAL |
10 |
MEDIUM |
6.3 |
2026-09-17 |
|||
CRITICAL |
10 |
CRITICAL |
9.3 |
2026-09-17 |
|||
CRITICAL |
10 |
CRITICAL |
9.9 |
2026-09-17 |
|||
CRITICAL |
10 |
HIGH |
8.9 |
2026-09-17 |
|||
CRITICAL |
10 |
CRITICAL |
9.9 |
2026-09-17 |
|||
CRITICAL |
10 |
HIGH |
8.5 |
2026-09-17 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |