2.12.0

DATE	CVE	VULNERABILITY TITLE	RISK
2023-03-29	CVE-2023-0664	Improper Privilege Management vulnerability in multiple products A flaw was found in the QEMU Guest Agent service for Windows. local low complexity qemu redhat fedoraproject CWE-269	7.8
2023-03-23	CVE-2023-1544	Allocation of Resources Without Limits or Throttling vulnerability in multiple products A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. local low complexity qemu fedoraproject CWE-770	6.3
2022-11-29	CVE-2022-4144	An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. local low complexity qemu fedoraproject redhat	6.5
2022-11-07	CVE-2022-3872	Unspecified vulnerability in Qemu An off-by-one read/write issue was found in the SDHCI device of QEMU. network low complexity qemu	8.6
2022-08-29	CVE-2022-0358	Improper Check for Dropped Privileges vulnerability in multiple products A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. local low complexity qemu redhat CWE-273	7.8
2022-08-25	CVE-2021-3929	Use After Free vulnerability in multiple products A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. local low complexity qemu fedoraproject CWE-416	8.2
2022-05-11	CVE-2021-3611	A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. local low complexity qemu redhat	6.5
2022-05-02	CVE-2021-3750	A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. local low complexity qemu redhat	8.2
2022-04-29	CVE-2021-4206	Incorrect Calculation of Buffer Size vulnerability in multiple products A flaw was found in the QXL display device emulation in QEMU. local low complexity qemu redhat debian CWE-131	8.2
2022-04-29	CVE-2021-4207	Classic Buffer Overflow vulnerability in multiple products A flaw was found in the QXL display device emulation in QEMU. local low complexity qemu redhat debian CWE-120	8.2