PH
Product
PowerVM Hypervisor
31
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 2High 11Medium 15Low 3
Watch
Add PowerVM Hypervisor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-34331 | 9.8 | Nov 11 | After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being… Affected: fw950; fw1010 |
| CVE-2021-38917 | 9.1 | Dec 10 | IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of… Affected: fw860; fw940; fw950 |
| CVE-2023-30438 | 8.8 | May 17 | An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an… Affected: fw950 before fw950.71; fw1010.00 before fw1010.51; fw1030.00 before fw1030.11; fw1020.00 before fw1020.31; fw1030.00 before fw1030.11 |
| CVE-2026-11885 | 8.4 | Jul 30 | Power System update in Buffer Copy Affected: FW1110.00 through FW1110.20; FW1060.00 through FW1060.71; FW950.00 through FW950.H1 |
| CVE-2026-96262 | 8.2 | Oct 12 | IBM Power Systems Firmware Buffer Overflow Affected: FW1060.00 through FW1060.81 |
| CVE-2026-96263 | 8.2 | Oct 12 | IBM Power Systems Firmware Buffer Overflow Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81 |
| CVE-2026-96264 | 8.2 | Oct 12 | IBM Power Systems Firmware Buffer Overflow Affected: FW1060.00 through FW1060.81 |
| CVE-2026-96265 | 8.2 | Oct 12 | IBM Power Systems Firmware Improper Memory Buffer Restriction Affected: FW1060.00 through FW1060.81 |
| CVE-2026-96266 | 8.2 | Oct 12 | IBM Power Systems Firmware Buffer Overflow Affected: FW1060.00 through FW1060.81 |
| CVE-2023-30440 | 7.9 | May 23 | IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow… Affected: fw860 through fw860.b3; fw950 through fw950.70; fw1010 through fw1010.50; fw1020.00 through fw1020.30; fw1030.00 through fw1030.10 |
| CVE-2023-25683 | 7.5 | Jun 15 | IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.00 through FW1030.11 could allow an attacker to obtain… Affected: fw950 through fw950.71; fw1010 through fw1010.40; fw1020 through fw1020.20; fw1030 through fw1030.11 |
| CVE-2021-38918 | 7.5 | Jan 5 | IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could lead to a violation of the isolation between peer VMs Affected: fw860; fw940; fw950; fw1010 |
| CVE-2026-96261 | 7.3 | Oct 12 | IBM Power Systems Firmware Buffer Overflow Affected: FW1060.00 through FW1060.81 |
| CVE-2022-22445 | 6.5 | Jul 18 | An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise partition firmware Affected: fw950 before fw950.40; fw1010 before fw1010.32 |
| CVE-2021-38937 | 6.5 | Dec 10 | IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a specially crafted IBMi Hypervisor call Affected: fw940; fw950; fw1010 |
| CVE-2025-36238 | 6.0 | Feb 2 | IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administration privileges to obtain… Affected: fw950.00; fw950.10; fw950.11; fw950.20; fw950.30; fw950.40; +28 more |
| CVE-2021-29795 | 6.0 | Sep 21 | IBM PowerVM Hypervisor FW860, FW930, FW940, and FW950 could allow a local user to create a specially crafted sequence of hypervisor calls from a partition that could crash the… Affected: fw860; fw930; fw940; fw950 |
| CVE-2024-41781 | 5.9 | Nov 22 | IBM PowerVM Platform KeyStore (IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1030.00 through FW1030.60, FW1050.00 through FW1050.20, and FW1060.00 through… Affected: fw950.00 through fw950.b0; fw1030.00 through fw1030.60; fw1050.00 through fw1050.20; fw1060.00 through fw1060.10 |
| CVE-2026-17503 | 5.1 | Sep 24 | This Power System update is being released to address Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81; FW950.00 through FW950.H3 |
| CVE-2026-17413 | 5.1 | Sep 24 | This Power System update is being released to address Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81; FW950.00 through FW950.H3 |
| CVE-2025-36035 | 5.1 | Sep 14 | IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could allow a local privileged user to cause a denial of service by… Affected: FW950.00 through FW950.E0; FW1050.00 through FW1050.50; FW1060.00 through FW1060.40; FW1050.00 through FW1050.50; FW1060.00 through FW1060.40 |
| CVE-2023-33851 | 4.9 | Feb 4 | IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1020.00 through FW1020.40, and FW1030.00 through FW1030.30 could reveal sensitive partition data to a system administrator Affected: fw950 through fw950.90; fw1020.00 through fw1020.40; fw1030.00 through fw1030.30 |
| CVE-2026-4932 | 4.6 | Jul 28 | This Power System update is being released to address Insufficient Entropy Affected: FW1110.00 through FW1110.20; FW1060.00 through FW1060.71 |
| CVE-2026-17504 | 4.4 | Sep 24 | This Power System update is being released to address Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81; FW950.00 through FW950.H3 |
| CVE-2025-0986 | 4.4 | Mar 28 | IBM PowerVM Hypervisor FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could allow a local user, under certain Linux processor combability mode configurations, to… Affected: fw1050.00 through fw1050.30; fw1060.00 through fw1060.20 |
| CVE-2023-46183 | 4.4 | Feb 6 | IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1020.00 through FW1020.40, and FW1030.00 through FW1030.30 could allow a system administrator to obtain sensitive partition… Affected: fw950 through fw950.90; fw1020.00 through fw1020.40; fw1030.00 through fw1030.30 |
| CVE-2021-20505 | 4.4 | Jul 29 | The PowerVM Logical Partition Mobility(LPM) (PowerVM Hypervisor FW920, FW930, FW940, and FW950) encryption key exchange protocol can be compromised Affected: fw920; fw930; fw940; fw950 |
| CVE-2026-18870 | 4.3 | Sep 24 | This Power System update is being released to address Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81; FW950.00 through FW950.H3 |
| CVE-2026-17511 | 3.4 | Sep 24 | This Power System update is being released to address Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81; FW950.00 through FW950.H3 |
| CVE-2025-36194 | 3.3 | Feb 2 | IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific… Affected: fw950.00; fw950.10; fw950.11; fw950.20; fw950.30; fw950.40; +28 more |
| CVE-2026-19492 | 3.2 | Sep 24 | This Power System update is being released to address Affected: FW1120.00 through FW1120.01; FW1110.00 through FW1110.31; FW1060.00 through FW1060.81 |
Showing 31