PH
Product
PowerVM Hypervisor
31
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 2High 11Medium 15Low 3
Watch
Add PowerVM Hypervisor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-34331 | 9.8 | Nov 11 | After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being… Affected: fw950; fw1010 |
| CVE-2021-38917 | 9.1 | Dec 10 | IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of… Affected: fw860; fw940; fw950 |
| CVE-2023-30438 | 8.8 | May 17 | An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an… Affected: fw950 before fw950.71; fw1010.00 before fw1010.51; fw1030.00 before fw1030.11; fw1020.00 before fw1020.31; fw1030.00 before fw1030.11 |
| CVE-2026-11885 | 8.4 | Jul 30 | Power System update in Buffer Copy Affected: FW1110.00 through FW1110.20; FW1060.00 through FW1060.71; FW950.00 through FW950.H1 |
| CVE-2026-96262 | 8.2 | Oct 12 | IBM Power Systems Firmware Buffer Overflow Affected: FW1060.00 through FW1060.81 |
| CVE-2026-96263 | 8.2 | Oct 12 | IBM Power Systems Firmware Buffer Overflow Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81 |
| CVE-2026-96264 | 8.2 | Oct 12 | IBM Power Systems Firmware Buffer Overflow Affected: FW1060.00 through FW1060.81 |
| CVE-2026-96265 | 8.2 | Oct 12 | IBM Power Systems Firmware Improper Memory Buffer Restriction Affected: FW1060.00 through FW1060.81 |
| CVE-2026-96266 | 8.2 | Oct 12 | IBM Power Systems Firmware Buffer Overflow Affected: FW1060.00 through FW1060.81 |
| CVE-2023-30440 | 7.9 | May 23 | IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow… Affected: fw860 through fw860.b3; fw950 through fw950.70; fw1010 through fw1010.50; fw1020.00 through fw1020.30; fw1030.00 through fw1030.10 |
| CVE-2023-25683 | 7.5 | Jun 15 | IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain… Affected: fw950 through fw950.71; fw1010 through fw1010.40; fw1020 through fw1020.20; fw1030 through fw1030.11 |
| CVE-2021-38918 | 7.5 | Jan 5 | IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could lead to a violation of the isolation between peer VMs Affected: fw860; fw940; fw950; fw1010 |
| CVE-2026-96261 | 7.3 | Oct 12 | IBM Power Systems Firmware Buffer Overflow Affected: FW1060.00 through FW1060.81 |
| CVE-2022-22445 | 6.5 | Jul 18 | An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise partition firmware Affected: fw950 before fw950.40; fw1010 before fw1010.32 |
| CVE-2021-38937 | 6.5 | Dec 10 | IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a specially crafted IBMi Hypervisor call Affected: fw940; fw950; fw1010 |
| CVE-2025-36238 | 6.0 | Feb 2 | Power System Exposure of Sensitive System Information Affected: FW1110.00 through FW1110.03; FW1060.00 through FW1060.51; FW950.00 through FW950.F0 |
| CVE-2021-29795 | 6.0 | Sep 21 | IBM PowerVM Hypervisor FW860, FW930, FW940, and FW950 could allow a local user to create a specially crafted sequence of hypervisor calls from a partition that could crash the… Affected: fw860; fw930; fw940; fw950 |
| CVE-2024-41781 | 5.9 | Nov 22 | IBM PowerVM Hypervisor information disclosure Affected: fw950.00 through fw950.b0; fw1030.00 through fw1030.60; fw1050.00 through fw1050.20; fw1060.00 through fw1060.10 |
| CVE-2026-17503 | 5.1 | Sep 24 | This Power System update is being released to address Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81; FW950.00 through FW950.H3 |
| CVE-2026-17413 | 5.1 | Sep 24 | This Power System update is being released to address Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81; FW950.00 through FW950.H3 |
| CVE-2025-36035 | 5.1 | Sep 14 | IBM PowerVM Hypervisor denial of service Affected: FW950.00 through FW950.E0; FW1050.00 through FW1050.50; FW1060.00 through FW1060.40; FW1050.00 through FW1050.50; FW1060.00 through FW1060.40 |
| CVE-2023-33851 | 4.9 | Feb 4 | IBM PowerVM Hypervisor information disclosure Affected: FW950.00 through FW950.90; FW1020.00 through FW1020.40; FW1030.00 through FW1030.30 |
| CVE-2026-4932 | 4.6 | Jul 28 | This Power System update is being released to address Insufficient Entropy Affected: FW1110.00 through FW1110.20; FW1060.00 through FW1060.71 |
| CVE-2026-17504 | 4.4 | Sep 24 | This Power System update is being released to address Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81; FW950.00 through FW950.H3 |
| CVE-2025-0986 | 4.4 | Mar 28 | IBM PowerVM Hypervisor data manipulation Affected: fw1050.00 through fw1050.30; fw1060.00 through fw1060.20 |
| CVE-2023-46183 | 4.4 | Feb 6 | IBM PowerVM Hypervisor information disclosure Affected: FW950.00 through FW950.90; FW1020.00 through FW1020.40; FW1030.00 through FW1030.30 |
| CVE-2021-20505 | 4.4 | Jul 29 | The PowerVM Logical Partition Mobility(LPM) (PowerVM Hypervisor FW920, FW930, FW940, and FW950) encryption key exchange protocol can be compromised Affected: fw920; fw930; fw940; fw950 |
| CVE-2026-18870 | 4.3 | Sep 24 | This Power System update is being released to address Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81; FW950.00 through FW950.H3 |
| CVE-2026-17511 | 3.4 | Sep 24 | This Power System update is being released to address Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81; FW950.00 through FW950.H3 |
| CVE-2025-36194 | 3.3 | Feb 2 | This Power System update is being released to address Affected: FW1110.00 through FW1110.03; FW1060.00 through FW1060.51; FW950.00 through FW950.F0 |
| CVE-2026-19492 | 3.2 | Sep 24 | This Power System update is being released to address Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81 |
Showing 31
