Vulnerabilities > Qemu > Qemu > 6.2.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-07-11 | CVE-2023-3354 | NULL Pointer Dereference vulnerability in multiple products A flaw was found in the QEMU built-in VNC server. | 7.5 |
| 2023-03-29 | CVE-2023-0664 | Improper Privilege Management vulnerability in multiple products A flaw was found in the QEMU Guest Agent service for Windows. | 7.8 |
| 2023-03-23 | CVE-2023-1544 | Allocation of Resources Without Limits or Throttling vulnerability in multiple products A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. | 6.3 |
| 2022-11-29 | CVE-2022-4144 | Out-of-bounds Read vulnerability in multiple products An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. | 6.5 |
| 2022-11-07 | CVE-2022-3872 | Off-by-one Error vulnerability in Qemu An off-by-one read/write issue was found in the SDHCI device of QEMU. | 8.6 |
| 2022-10-17 | CVE-2022-3165 | Integer Underflow (Wrap or Wraparound) vulnerability in multiple products An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. | 6.5 |
| 2022-09-13 | CVE-2022-2962 | Improper Synchronization vulnerability in Qemu A DMA reentrancy issue was found in the Tulip device emulation in QEMU. | 7.8 |
| 2022-08-29 | CVE-2022-0358 | Improper Check for Dropped Privileges vulnerability in multiple products A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. | 7.8 |
| 2022-08-26 | CVE-2022-0216 | Use After Free vulnerability in multiple products A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. | 4.4 |
| 2022-08-25 | CVE-2021-3929 | Use After Free vulnerability in multiple products A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. | 8.2 |