IBM PowerVM Hypervisor

• CVE-2026-96261 High 7.3 IBM Power Systems Firmware Buffer Overflow <0.1%
• CVE-2026-96262 High 8.2 IBM Power Systems Firmware Buffer Overflow 0.1%
• CVE-2026-96263 High 8.2 IBM Power Systems Firmware Buffer Overflow 0.1%
• CVE-2026-96264 High 8.2 IBM Power Systems Firmware Buffer Overflow 0.1%
• CVE-2026-96265 High 8.2 IBM Power Systems Firmware Improper Memory Buffer Restriction 0.1%
• CVE-2026-96266 High 8.2 IBM Power Systems Firmware Buffer Overflow 0.1%
• CVE-2026-19492 Low 3.2 This Power System update is being released to address 0.1%
• CVE-2026-18870 Medium 4.3 This Power System update is being released to address 0.2%
• CVE-2026-17511 Low 3.4 This Power System update is being released to address 0.1%
• CVE-2026-17504 Medium 5.1 This Power System update is being released to address 0.1%
• CVE-2026-17503 Medium 5.1 This Power System update is being released to address 0.1%
• CVE-2026-17413 Medium 5.1 This Power System update is being released to address 0.1%
• CVE-2026-4936 Medium 5.1 Power System Insufficient Entropy 0.1%
• CVE-2026-4937 Medium 5.3 Power System Insufficient Entropy 0.1%
• CVE-2026-16707 High 8.2 Power System Out-of-bounds Read 0.2%
• CVE-2026-17028 Medium 6.5 Power System Out-of-bounds Read 0.3%
• CVE-2026-17091 High 8.4 Power System Integer Overflow 0.1%
• CVE-2026-17097 High 7.3 Power System Improper Validation 0.1%
• CVE-2026-18821 High 7.5 Power System Out-of-bounds Write 0.3%
• CVE-2026-18871 High 7.3 Power System Buffer Overflow 0.1%
• CVE-2026-17414 High 8.1 Power System Improper Input Validation 0.3%
• CVE-2026-16661 High 8.2 Power System Integer Overflow 0.2%
• CVE-2026-15961 Medium 5.2 Power System Information Disclosure 0.1%
• CVE-2026-11885 High 8.4 Power System update in Buffer Copy 0.1%
• CVE-2026-4932 Medium 4.2 This Power System update is being released to address Insufficient Entropy 0.1%
• CVE-2025-36194 Low 2.8 This Power System update is being released to address 0.1%
• CVE-2025-36238 Medium 6.0 Power System Exposure of Sensitive System Information 0.2%
• CVE-2025-36035 Medium 6.7 IBM PowerVM Hypervisor denial of service 0.1%
• CVE-2025-0986 Medium 4.5 IBM PowerVM Hypervisor data manipulation 0.1%
• CVE-2024-41781 Medium 5.1 IBM PowerVM Hypervisor information disclosure 0.4%
• CVE-2023-46183 Medium 5.3 IBM PowerVM Hypervisor information disclosure 0.2%
• CVE-2023-33851 Medium 5.3 IBM PowerVM Hypervisor information disclosure 0.4%
• CVE-2023-25683 Medium 5.9 IBM PowerVM Hypervisor information disclosure 0.6%
• CVE-2023-30440 Medium 6.7 IBM PowerVM Hypervisor denial of service 0.2%
• CVE-2023-30438 Critical 9.3 IBM PowerVM gain access 0.2%
• CVE-2022-22445 High 7.6 An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise partition firmware. 0.7%
• CVE-2021-38918 High 8.6 IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could lead to a violation of the isolation between peer VMs. IBM X-Force ID: 210019. 1.2%
• CVE-2021-38937 Medium 6.3 IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a specially crafted IBMi Hypervisor call. IBM X-Force ID: 210894. 1.0%
• CVE-2021-38917 High 7.4 IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted servic 1.6%
• CVE-2021-38923 High 8.0 IBM PowerVM Hypervisor FW1010 could allow a privileged user to gain access to another VM due to assigning duplicate WWPNs. IBM X-Force ID: 210162. 1.1%
• CVE-2021-29795 Medium 6.0 IBM PowerVM Hypervisor FW860, FW930, FW940, and FW950 could allow a local user to create a specially crafted sequence of hypervisor calls from a partition that could crash the system. IBM X-Force ID: 0.2%
• CVE-2021-29765 Medium 5.9 IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. IBM X-Force ID: 202476. 1.1%
• CVE-2021-20505 Medium 4.4 The PowerVM Logical Partition Mobility(LPM) (PowerVM Hypervisor FW920, FW930, FW940, and FW950) encryption key exchange protocol can be compromised. If an attacker has the ability to capture encrypted 0.5%