https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-19783.htmlhttps://patchthecve.com/cve/CVE-2026-19783.htmlMon, 26 Oct 2026 10:10:00 +0000MEDIUM 6.7: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege eschttps://patchthecve.com/cve/CVE-2026-19449.htmlhttps://patchthecve.com/cve/CVE-2026-19449.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 8.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root.https://patchthecve.com/cve/CVE-2026-19448.htmlhttps://patchthecve.com/cve/CVE-2026-19448.htmlMon, 26 Oct 2026 10:10:00 +0000MEDIUM 6.5: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service.https://patchthecve.com/cve/CVE-2026-19446.htmlhttps://patchthecve.com/cve/CVE-2026-19446.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.5: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart.https://patchthecve.com/cve/CVE-2026-19442.htmlhttps://patchthecve.com/cve/CVE-2026-19442.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 8.2: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.https://patchthecve.com/cve/CVE-2026-19437.htmlhttps://patchthecve.com/cve/CVE-2026-19437.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 8.1: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.https://patchthecve.com/cve/CVE-2026-18842.htmlhttps://patchthecve.com/cve/CVE-2026-18842.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 8.4: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write.https://patchthecve.com/cve/CVE-2026-18840.htmlhttps://patchthecve.com/cve/CVE-2026-18840.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 8.2: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer.https://patchthecve.com/cve/CVE-2026-18835.htmlhttps://patchthecve.com/cve/CVE-2026-18835.htmlMon, 26 Oct 2026 10:10:00 +0000CRITICAL 9.9: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.https://patchthecve.com/cve/CVE-2026-18832.htmlhttps://patchthecve.com/cve/CVE-2026-18832.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 8.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.https://patchthecve.com/cve/CVE-2026-18828.htmlhttps://patchthecve.com/cve/CVE-2026-18828.htmlMon, 26 Oct 2026 10:10:00 +0000MEDIUM 5.4: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow.https://patchthecve.com/cve/CVE-2026-18824.htmlhttps://patchthecve.com/cve/CVE-2026-18824.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 8.4: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.https://patchthecve.com/cve/CVE-2026-18822.htmlhttps://patchthecve.com/cve/CVE-2026-18822.htmlMon, 26 Oct 2026 10:10:00 +0000MEDIUM 4.4: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption when parsing directory records.https://patchthecve.com/cve/CVE-2026-18716.htmlhttps://patchthecve.com/cve/CVE-2026-18716.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.9: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.https://patchthecve.com/cve/CVE-2026-18670.htmlhttps://patchthecve.com/cve/CVE-2026-18670.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 8.2: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and potentially disclose sensitive information due to an integer underflow.https://patchthecve.com/cve/CVE-2026-17436.htmlhttps://patchthecve.com/cve/CVE-2026-17436.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 8.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.https://patchthecve.com/cve/CVE-2026-17425.htmlhttps://patchthecve.com/cve/CVE-2026-17425.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.5: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack buffer overflow.https://patchthecve.com/cve/CVE-2026-17424.htmlhttps://patchthecve.com/cve/CVE-2026-17424.htmlMon, 26 Oct 2026 10:10:00 +0000MEDIUM 4.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions due to improper limitation of a pathname to a restricted directory.https://patchthecve.com/cve/CVE-2026-17423.htmlhttps://patchthecve.com/cve/CVE-2026-17423.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.7: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds read.https://patchthecve.com/cve/CVE-2026-17422.htmlhttps://patchthecve.com/cve/CVE-2026-17422.htmlMon, 26 Oct 2026 10:10:00 +0000CRITICAL 9.3: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow.https://patchthecve.com/cve/CVE-2026-17195.htmlhttps://patchthecve.com/cve/CVE-2026-17195.htmlMon, 26 Oct 2026 10:10:00 +0000MEDIUM 6.5: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write.https://patchthecve.com/cve/CVE-2026-17171.htmlhttps://patchthecve.com/cve/CVE-2026-17171.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite arbitrary files due to improper resolution of symbolic links.https://patchthecve.com/cve/CVE-2026-17170.htmlhttps://patchthecve.com/cve/CVE-2026-17170.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.5: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an allocation size.https://patchthecve.com/cve/CVE-2026-17168.htmlhttps://patchthecve.com/cve/CVE-2026-17168.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 8.5: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.https://patchthecve.com/cve/CVE-2026-17165.htmlhttps://patchthecve.com/cve/CVE-2026-17165.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.5: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.https://patchthecve.com/cve/CVE-2026-17163.htmlhttps://patchthecve.com/cve/CVE-2026-17163.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.5: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an array size field.https://patchthecve.com/cve/CVE-2026-17160.htmlhttps://patchthecve.com/cve/CVE-2026-17160.htmlMon, 26 Oct 2026 10:10:00 +0000CRITICAL 9.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation.https://patchthecve.com/cve/CVE-2026-17159.htmlhttps://patchthecve.com/cve/CVE-2026-17159.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.5: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow.https://patchthecve.com/cve/CVE-2026-17157.htmlhttps://patchthecve.com/cve/CVE-2026-17157.htmlMon, 26 Oct 2026 10:10:00 +0000CRITICAL 9.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.https://patchthecve.com/cve/CVE-2026-17152.htmlhttps://patchthecve.com/cve/CVE-2026-17152.htmlMon, 26 Oct 2026 10:10:00 +0000CRITICAL 9.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.https://patchthecve.com/cve/CVE-2026-17145.htmlhttps://patchthecve.com/cve/CVE-2026-17145.htmlThu, 27 Aug 2026 17:17:21 +0000CRITICAL 9.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management.https://patchthecve.com/cve/CVE-2026-17142.htmlhttps://patchthecve.com/cve/CVE-2026-17142.htmlTue, 25 Aug 2026 13:50:45 +0000CRITICAL 9.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper authentication.https://patchthecve.com/cve/CVE-2026-17141.htmlhttps://patchthecve.com/cve/CVE-2026-17141.htmlTue, 25 Aug 2026 13:50:52 +0000CRITICAL 9.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.https://patchthecve.com/cve/CVE-2026-17138.htmlhttps://patchthecve.com/cve/CVE-2026-17138.htmlTue, 25 Aug 2026 13:51:00 +0000HIGH 8.1: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.https://patchthecve.com/cve/CVE-2026-17136.htmlhttps://patchthecve.com/cve/CVE-2026-17136.htmlTue, 25 Aug 2026 13:51:11 +0000CRITICAL 9.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a format string vulnerability.https://patchthecve.com/cve/CVE-2026-17124.htmlhttps://patchthecve.com/cve/CVE-2026-17124.htmlThu, 27 Aug 2026 17:17:20 +0000HIGH 7.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds read.https://patchthecve.com/cve/CVE-2026-17122.htmlhttps://patchthecve.com/cve/CVE-2026-17122.htmlTue, 25 Aug 2026 13:52:09 +0000CRITICAL 9.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.https://patchthecve.com/cve/CVE-2026-17121.htmlhttps://patchthecve.com/cve/CVE-2026-17121.htmlMon, 24 Aug 2026 17:29:30 +0000HIGH 7.5: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.https://patchthecve.com/cve/CVE-2026-17120.htmlhttps://patchthecve.com/cve/CVE-2026-17120.htmlTue, 25 Aug 2026 13:52:18 +0000MEDIUM 5.3: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a buffer overflow.https://patchthecve.com/cve/CVE-2026-17118.htmlhttps://patchthecve.com/cve/CVE-2026-17118.htmlTue, 25 Aug 2026 13:52:33 +0000CRITICAL 9.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.https://patchthecve.com/cve/CVE-2026-17060.htmlhttps://patchthecve.com/cve/CVE-2026-17060.htmlTue, 25 Aug 2026 16:16:49 +0000HIGH 8.1: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read.https://patchthecve.com/cve/CVE-2026-17040.htmlhttps://patchthecve.com/cve/CVE-2026-17040.htmlTue, 25 Aug 2026 13:52:52 +0000CRITICAL 9.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.https://patchthecve.com/cve/CVE-2026-17024.htmlhttps://patchthecve.com/cve/CVE-2026-17024.htmlTue, 25 Aug 2026 13:53:27 +0000HIGH 7.7: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation.https://patchthecve.com/cve/CVE-2026-17009.htmlhttps://patchthecve.com/cve/CVE-2026-17009.htmlTue, 25 Aug 2026 13:57:12 +0000MEDIUM 4.7: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference.https://patchthecve.com/cve/CVE-2026-17007.htmlhttps://patchthecve.com/cve/CVE-2026-17007.htmlTue, 25 Aug 2026 13:57:24 +0000MEDIUM 6.7: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.https://patchthecve.com/cve/CVE-2026-17006.htmlhttps://patchthecve.com/cve/CVE-2026-17006.htmlThu, 27 Aug 2026 17:17:19 +0000HIGH 8.3: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.https://patchthecve.com/cve/CVE-2026-17003.htmlhttps://patchthecve.com/cve/CVE-2026-17003.htmlTue, 25 Aug 2026 13:58:13 +0000HIGH 7.7: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise the confidentiality and integrity of the system due to an out-of-bounds write.https://patchthecve.com/cve/CVE-2026-17000.htmlhttps://patchthecve.com/cve/CVE-2026-17000.htmlTue, 25 Aug 2026 13:58:45 +0000HIGH 8.1: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper authentication.https://patchthecve.com/cve/CVE-2026-16997.htmlhttps://patchthecve.com/cve/CVE-2026-16997.htmlTue, 25 Aug 2026 13:59:04 +0000HIGH 7.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management.https://patchthecve.com/cve/CVE-2026-16996.htmlhttps://patchthecve.com/cve/CVE-2026-16996.htmlTue, 25 Aug 2026 13:59:12 +0000HIGH 8.8: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow.