K
KVM
Security Risk Profile
41
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 27, 2010 to present
10
Total CVEs
5
Critical+High
0
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
41/100
medium
🆕 2Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
1High
4Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Null Pointer Dereference
1
Most Affected Products
1. KVM KVM5
2. KVM Linux kernel2
3. KVM Linux kernel (KVM: arm64: GICv2)1
4. KVM KVM/x86 (shadow MMU emulation)1
5. KVM KVM Hypervisor1
Recent Vulnerabilities
See more →CVE-2026-89932
unknown
KVM: nVMX: Always flush vpid02 on first use
Sep 16, 2026🔧 No Patch
CVE-2026-89727
EPSS 0%unknown
KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID
Sep 11, 2026🔧 No Patch
CVE-2026-72277
CVSS 9.3critical
KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory
Aug 15, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q3/64
unknown
Januscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-53359)
Jul 6, 2026🔧 No Patch
REDHAT-BUG-1695044
CVSS 7.0high
Apr 2, 2019🔧 No Patch
REDHAT-BUG-1278496
CVSS 7.0high
Nov 5, 2015🔧 No Patch
REDHAT-BUG-769721
CVSS 4.0medium
Dec 21, 2011🔧 No Patch
REDHAT-BUG-560887
CVSS 4.0medium
Feb 2, 2010🔧 No Patch
REDHAT-BUG-560654
CVSS 7.0high
Feb 1, 2010🔧 No Patch
REDHAT-BUG-559091
CVSS 7.0high
Jan 27, 2010🔧 No Patch
Monitor KVM in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.