SP
Vendor
Spice-space
9
CVEs
0
On KEV
0
New 30D
Products
SP7.8
Spice-vdagent
Spice-space
7 CVEs0 on KEV0 new
SP8.6
Spice-server
Spice-space
1 CVEs0 on KEV0 new
US6.4
Usbredir
Spice-space
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-57966 | SP Spice-vdagent Spice-space | 4.4 | Jun 29 | Spice-vdagent: path traversal in file transfer via unsanitized filename |
| CVE-2026-57965 | SP Spice-vdagent Spice-space | 5.1 | Jun 29 | Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow |
| CVE-2020-23793 | SP Spice-server Spice-space | 8.6 | Aug 22 | An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product |
| CVE-2021-3700 | US Usbredir Spice-space | 6.4 | Feb 24 | A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c |
| CVE-2020-25653 | SP Spice-vdagent Spice-space | 6.3 | Nov 26 | A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections |
| CVE-2020-25652 | SP Spice-vdagent Spice-space | 5.5 | Nov 26 | A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in… |
| CVE-2020-25651 | SP Spice-vdagent Spice-space | 6.4 | Nov 26 | A flaw was found in the SPICE file transfer protocol |
| CVE-2020-25650 | SP Spice-vdagent Spice-space | 5.5 | Nov 25 | A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine |
| CVE-2017-15108 | SP Spice-vdagent Spice-space | 7.8 | Jan 20 | spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to… |