IBM AIX vulnerabilities
146 known CVE vulnerabilities in IBM AIX, translated and rated.
- CVE-2026-17424Medium
In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, improper limitation of a pathname to a restricted directory could allow a remote attacker to bypass security restrictions.
- CVE-2026-17423High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds read.
- CVE-2026-17195Medium
In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, an out-of-bounds write could allow a local attacker to cause a denial of service.
- CVE-2026-17171High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite arbitrary files due to improper resolution of symbolic links.
- CVE-2026-17170High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an allocation size.
- CVE-2026-17168High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
- CVE-2026-17165High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.
- CVE-2026-17163High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an array size field.
- CVE-2026-17159High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow.
- CVE-2026-17138High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
- CVE-2026-17124High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds read.
- CVE-2026-17121High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
- CVE-2026-17120Medium
In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, a buffer overflow could allow a remote attacker to cause a denial of service.
- CVE-2026-17060High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read.
- CVE-2026-17024High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation.
- CVE-2026-17009Medium
In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, a NULL pointer dereference could allow a local attacker to cause a denial of service.
- CVE-2026-17007Medium
In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, an out-of-bounds read could allow a local attacker to obtain sensitive information or cause a denial of service.
- CVE-2026-17006High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
- CVE-2026-17003High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise the confidentiality and integrity of the system due to an out-of-bounds write.
- CVE-2026-17000High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper authentication.
- CVE-2026-16997High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management.
- CVE-2026-16996High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow.
- CVE-2026-16991High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper handling of symbolic links.
- CVE-2026-16989High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper resolution of symbolic links.
- CVE-2026-16980Medium
In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, improper validation of symbolic links could allow a local attacker to cause a denial of service.
- CVE-2026-16973Medium
In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, an out-of-bounds read could allow a local attacker to disclose sensitive kernel memory.
- CVE-2026-16972Medium
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication.
- CVE-2026-16964Medium
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information.
- CVE-2026-16958Medium
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
- CVE-2026-16952Medium
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption.
- CVE-2026-16951Medium
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow.
- CVE-2026-16946High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap buffer overflow.
- CVE-2026-16945High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow.
- CVE-2026-16944Medium
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow.
- CVE-2026-16943High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow.
- CVE-2026-16937High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management.
- CVE-2026-16936High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow.
- CVE-2026-16935High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use (TOCTOU) race condition.
- CVE-2026-16934High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap-based buffer overflow.
- CVE-2026-16932High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable.
- CVE-2026-16928High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.
- CVE-2026-16927High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use (TOCTOU) race condition.
- CVE-2026-16925High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization.
- CVE-2026-16924High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation.
- CVE-2026-16923High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management.
- CVE-2026-16922High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use (TOCTOU) race condition.
- CVE-2026-16914Medium
IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 have a vulnerability that could allow a local attacker to execute arbitrary code due to an out-of-bounds write.
- CVE-2026-16911High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack buffer overflow.
- CVE-2026-16909High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking.
- CVE-2026-16901High
IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.

