Cloud-hypervisor vulnerabilities
We track 2 vulnerabilities in Cloud-hypervisor products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2026.
2vulnerabilities
1critical
1high
0exploited
9.4average CVSS score
Latest Cloud-hypervisor vulnerabilities
- 8.9 High severity
cloud-hypervisor: Use After Free
Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. From version 21.0 to before version 51.2, a guest can cause a use-after-free in the cloud-hypervisor process by submitting two virtio-block descriptor chains that reuse the same head_index whil
- 10.0 Critical severity
cloud-hypervisor: External Control of File Name or Path
Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. Versions 34.0 through 50.0 arevulnerable to arbitrary host file exfiltration (constrained by process privileges) when using virtio-block devices backed by raw images. A malicious guest can over