FR
live
vendor

Ibm

304
vulnerabilities tracked
1
under active exploitation
91
critical
20 August 2026
latest publication
cve

Vulnerability watch

idvulnerabilityseveritypublished
CVE-2026-16922IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use (TOCTOU) race condition.Ibm Vios High CVSS 7 20/08 CVE-2026-16923IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management.Ibm Vios High CVSS 7.8 20/08 CVE-2026-16924IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation.Ibm Vios High CVSS 7.5 20/08 CVE-2026-16925IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization.Ibm Vios High CVSS 7.8 20/08 CVE-2026-16926IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input.Ibm Vios Critical CVSS 9.1 20/08 CVE-2026-16927IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use (TOCTOU) race condition.Ibm Vios High CVSS 7 20/08 CVE-2026-16928IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.Ibm Vios High CVSS 7.5 20/08 CVE-2026-16932IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable.Ibm Vios High CVSS 8.8 20/08 CVE-2026-16934IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap-based buffer overflow.Ibm Vios High CVSS 8.8 20/08 CVE-2026-16935IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use (TOCTOU) race condition.Ibm Vios High CVSS 7 20/08 CVE-2026-16936IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow.Ibm Vios High CVSS 8.8 20/08 CVE-2026-16937IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management.Ibm Vios High CVSS 7.8 20/08 CVE-2026-16943IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow.Ibm Vios High CVSS 7.8 20/08 CVE-2026-16944IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow.Ibm Vios High CVSS 7.8 20/08 CVE-2026-16945IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow.Ibm Vios High CVSS 7.8 20/08 CVE-2026-16946IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap buffer overflow.Ibm Vios High CVSS 7.8 20/08 CVE-2026-16958IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.Ibm Vios High CVSS 7.5 20/08 CVE-2026-16972IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication.Ibm Vios High CVSS 7.5 20/08 CVE-2026-16989IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper resolution of symbolic links.Ibm Vios High CVSS 7.8 20/08 CVE-2026-16991IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper handling of symbolic links.Ibm Vios High CVSS 7.8 20/08 CVE-2026-16996IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow.Ibm Vios High CVSS 8.8 20/08 CVE-2026-16997IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management.Ibm Vios High CVSS 7.8 20/08 CVE-2026-17000IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper authentication.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17003IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise the confidentiality and integrity of the system due to an out-of-bounds write.Ibm Vios Critical CVSS 9.1 20/08 CVE-2026-17006IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17007IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.Ibm Vios High CVSS 7.1 20/08 CVE-2026-17024IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17040IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17060IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read.Ibm Vios Critical CVSS 9.1 20/08 CVE-2026-17118IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17120IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a buffer overflow.Ibm Vios High CVSS 7.5 20/08 CVE-2026-17121IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.Ibm Vios High CVSS 7.5 20/08 CVE-2026-17122IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17124IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds read.Ibm Vios High CVSS 7.8 20/08 CVE-2026-17136IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a format string vulnerability.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17138IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17141IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17142IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper authentication.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17145IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17152IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17157IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17159IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow.Ibm Vios High CVSS 7.5 20/08 CVE-2026-17160IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-17163IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an array size field.Ibm Vios High CVSS 7.5 20/08 CVE-2026-17165IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.Ibm Vios High CVSS 7.5 20/08 CVE-2026-17168IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.Ibm Vios High CVSS 8.8 20/08 CVE-2026-17170IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an allocation size.Ibm Vios High CVSS 7.5 20/08 CVE-2026-17171IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite arbitrary files due to improper resolution of symbolic links.Ibm Vios High CVSS 7.8 20/08 CVE-2026-17422IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow.Ibm Vios High CVSS 8.8 20/08 CVE-2026-17423IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds read.Ibm Vios Critical CVSS 9.1 20/08 CVE-2026-17425IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack buffer overflow.Ibm Vios High CVSS 7.5 20/08 CVE-2026-17436IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-18670IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and potentially disclose sensitive information due to an integer underflow.Ibm Vios Critical CVSS 9.1 20/08 CVE-2026-18716IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.Ibm Vios Critical CVSS 9.1 20/08 CVE-2026-18828IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow.Ibm Vios High CVSS 7.5 20/08 CVE-2026-18832IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-18835IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.Ibm Vios Critical CVSS 9.9 20/08 CVE-2026-18840IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer.Ibm Vios High CVSS 7.8 20/08 CVE-2026-18842IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write.Ibm Vios High CVSS 7.8 20/08 CVE-2026-19437IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.Ibm Vios Critical CVSS 9.8 20/08 CVE-2026-19442IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.Ibm Vios High CVSS 8.8 20/08 CVE-2026-19446IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart.Ibm Vios High CVSS 7.5 20/08 CVE-2026-19448IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service.Ibm Vios High CVSS 7.5 20/08 CVE-2026-19449IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root.Ibm Vios High CVSS 8.8 20/08 CVE-2026-19783IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege escalation.Ibm Vios High CVSS 7.8 20/08 CVE-2025-36254IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial of service.Ibm Ds8900f Firmware High CVSS 7.4 19/08 CVE-2025-36255IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions.Ibm Ds8900f Firmware High CVSS 8.8 19/08 CVE-2026-14970IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow.Ibm Vios High CVSS 7.5 19/08 CVE-2026-15061IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service could allow a remote attacker to overwrite files due to path traversal.Ibm Vios High CVSS 8.2 19/08 CVE-2026-15065IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file.Ibm Vios Critical CVSS 9.1 19/08 CVE-2026-15068IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.Ibm Vios Critical CVSS 9.9 19/08 CVE-2026-15078IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized access to AIX systems due to improper validation of TLS certificates.Ibm Vios High CVSS 8.1 19/08 CVE-2026-16656IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication.Ibm Vios Critical CVSS 9.8 19/08 CVE-2026-16661IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can exploit this vulnerability, allowing arbitrary code to be executed in the host firmware runtime, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact to the managed system.Ibm Power System S1122 \(9824-22a\) Firmware High CVSS 8.2 19/08 CVE-2026-16686IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication.Ibm Vios High CVSS 8.2 19/08 CVE-2026-16687IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed request, allowing arbitrary code execution, giving the attacker full control over the managed system, resulting in a confidentiality, integrity, and availability impact.Ibm Power System E1180 \(9080-heu\) Firmware Critical CVSS 9.6 19/08 CVE-2026-16690IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.Ibm Vios High CVSS 7.5 19/08 CVE-2026-16703IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management.Ibm Vios High CVSS 7.8 19/08 CVE-2026-16706IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.Ibm Vios High CVSS 7.5 19/08 CVE-2026-16707IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory, compromising the host firmware boot stack and the hypervisor subsequently loaded by it. Successful exploitation results in a confidentiality, integrity, and availability impact to the managed system.Ibm Power System S1122 \(9824-22a\) Firmware High CVSS 8.2 19/08 CVE-2026-16814IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.Ibm Vios High CVSS 8.8 19/08 CVE-2026-16816IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.Ibm Vios Critical CVSS 9.9 19/08 CVE-2026-16817IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.Ibm Vios High CVSS 7.5 19/08 CVE-2026-16818IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.Ibm Vios High CVSS 7.5 19/08 CVE-2026-16819IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service and compromise data integrity due to a time-of-check time-of-use race condition.Ibm Vios High CVSS 7.7 19/08 CVE-2026-16822IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC policy server and modify traffic due to improper certificate validation.Ibm Aix Critical CVSS 9.3 19/08 CVE-2026-16824IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to unbounded recursion.Ibm Aix High CVSS 7.5 19/08 CVE-2026-16828IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can cause the ASMI web server to crash with possible memory corruption and generate an error log; hosted partitions are not affected. The ASMI web interface will restart automatically; however, repeated exploitation could result in a sustained loss of access to the ASMI management interface, resulting in an integrity and availability impact.Ibm Power System E1080 \(9080-hex\) Firmware High CVSS 7.6 19/08 CVE-2026-16831IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.Ibm Aix High CVSS 7.5 19/08 CVE-2026-16832IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can execute arbitrary code on the service processor, giving full control over the managed system, resulting in a confidentiality, integrity, and availability impact.Ibm Power System E1080 \(9080-hex\) Firmware High CVSS 8.4 19/08 CVE-2026-16834IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer underflow.Ibm Aix Critical CVSS 9.8 19/08 CVE-2026-16835IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration, and console access across all hosted partitions, resulting in a confidentiality, integrity, and availability impact to the managed system.Ibm Power System E1080 \(9080-hex\) Firmware Critical CVSS 9.6 19/08 CVE-2026-16836IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.Ibm Aix High CVSS 7.5 19/08 CVE-2026-16837IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper handling of a missing SSL client certificate.Ibm Aix High CVSS 7.5 19/08 CVE-2026-16838IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensitive information due to a time-of-check to time-of-use (TOCTOU) race condition.Ibm Aix High CVSS 7 19/08 CVE-2026-16839IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser.Ibm Aix Critical CVSS 9.4 19/08 CVE-2026-16840IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.Ibm Aix Critical CVSS 9.8 19/08 CVE-2026-16841IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.Ibm Aix High CVSS 8.8 19/08 CVE-2026-16842IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.Ibm Aix High CVSS 8.8 19/08 CVE-2026-16844IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.Ibm Aix High CVSS 8.8 19/08

The 100 most recent.

Type at least two characters.

navigate open esc dismiss