CyberSecBulletin

Virtio-win vulnerabilities

We track 1 vulnerability in Virtio-win products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.

1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score

Latest Virtio-win vulnerabilities

  • 7.8 High severity

    kvm-guest-drivers-windows: Heap-based Buffer Overflow

    CVE-2026-46655Virtio-win

    virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTL_SELECT request with attacker-controlled VIRTIO_VSOCK_SELECT.Fdss[*].fd_count values that o