K
KVM
Security Risk Profile
56
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 27, 2010 to present
10
Total CVEs
6
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
56/100
medium
Severity Distribution
Critical
1High
5Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Null Pointer Dereference
1
Most Affected Products
1. ubuntu/linux-riscv12
2. ubuntu/linux-azure11
3. ubuntu/linux-realtime11
4. ubuntu/linux-gcp10
5. ubuntu/linux9
Recent Vulnerabilities
See more →CVE-2026-89932
CVSS 8.8high
KVM: nVMX: Always flush vpid02 on first use
Sep 16, 2026
CVE-2026-89727
CVSS 4.0EPSS 0%medium
KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID
Sep 11, 2026
CVE-2026-72277
CVSS 9.3critical
KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory
Aug 15, 2026
https://seclists.org/oss-sec/2026/q3/64
unknown
Januscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-53359)
Jul 6, 2026🔧 No Patch
REDHAT-BUG-1695044
CVSS 7.0high
Apr 2, 2019🔧 No Patch
REDHAT-BUG-1278496
CVSS 7.0high
Nov 5, 2015🔧 No Patch
REDHAT-BUG-769721
CVSS 4.0medium
Dec 21, 2011🔧 No Patch
REDHAT-BUG-560887
CVSS 4.0medium
Feb 2, 2010🔧 No Patch
REDHAT-BUG-560654
CVSS 7.0high
Feb 1, 2010🔧 No Patch
REDHAT-BUG-559091
CVSS 7.0high
Jan 27, 2010🔧 No Patch
Monitor KVM in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.