A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 10, 2024 | Mar 29, 2023 |
| Oracle_linux | — | Upgrade qemu-kvm-commonUpgrade libguestfs-rescueUpgrade libguestfs-xfsUpgrade netcf-develUpgrade nbdkit-vddk-pluginUpgrade swtpm-toolsUpgrade libvirt-daemon-driver-networkUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-lock-sanlockUpgrade nbdkit-ssh-pluginUpgrade libguestfs-bash-completionUpgrade libvirtUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-rbdUpgrade nbdkit-python-pluginUpgrade libvirt-bash-completionUpgrade seabiosUpgrade nbdkit-gzip-pluginUpgrade nbdkit-serverUpgrade libguestfs-toolsUpgrade qemuUpgrade swtpm-libsUpgrade hivexUpgrade libnbd-develUpgrade qemu-block-rbdUpgrade ruby-libguestfsUpgrade nbdkit-develUpgrade qemu-commonUpgrade nbdkit-basic-filtersUpgrade qemu-block-glusterUpgrade qemu-kvm-block-curlUpgrade libvirt-libsUpgrade libiscsi-utilsUpgrade libvirt-daemonUpgrade virt-v2v-bash-completionUpgrade superminUpgrade python3-libguestfsUpgrade seavgabios-binUpgrade nbdkit-curl-pluginUpgrade python3-hivexUpgrade libguestfs-applianceUpgrade libvirt-daemon-driver-storage-coreUpgrade lua-guestfsUpgrade python3-libnbdUpgrade nbdkit-tar-filterUpgrade nbdkit-xz-filterUpgrade qemu-kvm-block-sshUpgrade swtpm-develUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-tar-pluginUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nodedevUpgrade perl-hivexUpgrade libvirt-nssUpgrade perl-Sys-GuestfsUpgrade qemu-system-aarch64Upgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-config-networkUpgrade libnbd-bash-completionUpgrade sgabios-binUpgrade libguestfs-winsupportUpgrade libguestfs-gobjectUpgrade libguestfs-benchmarkingUpgrade libvirt-wiresharkUpgrade nbdkit-tmpdisk-pluginUpgrade libguestfsUpgrade seabios-binUpgrade nbdfuseUpgrade qemu-system-x86Upgrade nbdkitUpgrade supermin-develUpgrade netcf-libsUpgrade hivex-develUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-linuxdisk-pluginUpgrade qemu-system-x86-coreUpgrade libvirt-clientUpgrade libguestfs-javaUpgrade qemu-block-iscsiUpgrade perl-Sys-VirtUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-gobject-develUpgrade netcfUpgrade virt-dibUpgrade qemu-kvm-block-iscsiUpgrade ivshmem-toolsUpgrade nbdkit-nbd-pluginUpgrade libvirt-daemon-kvmUpgrade virt-v2v-man-pages-jaUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-diskUpgrade libnbdUpgrade qemu-virtiofsdUpgrade qemu-system-aarch64-coreUpgrade qemu-guest-agentUpgrade virt-v2vUpgrade swtpmUpgrade qemu-imgUpgrade libvirt-develUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-adminUpgrade libiscsiUpgrade libguestfs-javadocUpgrade swtpm-tools-pkcs11Upgrade libtpmsUpgrade qemu-kvm-coreUpgrade virt-v2v-man-pages-ukUpgrade ruby-hivexUpgrade python3-libvirtUpgrade nbdkit-gzip-filterUpgrade libvirt-daemon-driver-secretUpgrade libtpms-develUpgrade libguestfs-man-pages-jaUpgrade libguestfs-develUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-ukUpgrade libguestfs-java-develUpgrade libvirt-docsUpgrade nbdkit-bash-completionUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage | May 17, 2023 | Feb 20, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 29, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub