PatchTheCVEvirtio-win vulnerabilities and fixes
Recent CVEs affecting virtio-win, with upgrade or downgrade steps. 2 tracked.
Also searched as: virtio win.
virtio-win has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-03-30. Highest priority: CVE-2026-5165 (score 29/100).
- CVE-2026-5165 MEDIUM 6.7 MITIGATE MITIGATE A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device
- CVE-2026-5164 MEDIUM 6.7 MITIGATE MITIGATE A flaw was found in virtio-win
FAQ
How do I fix virtio-win vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is virtio-win being exploited right now?
None of the tracked virtio-win CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which virtio-win CVE should I patch first?
CVE-2026-5165 currently ranks highest (29/100): A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device.