Filtered by vendor Virtio-win Subscriptions
Filtered by product Kvm-guest-drivers-windows Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-46655 1 Virtio-win 1 Kvm-guest-drivers-windows 2026-06-24 7.8 High
A flaw was found in virtio-win. A low-integrity process can issue an IOCTL request to viosock.sys!VIOSockSelect with a maliciously crafted request that causes an integer overflow. This allows the process to circumvent bounds checking, resulting in a heap overflow in the NonPagedPool kernel heap. The flaw could be exploited to escalate privileges on Windows systems running this driver.