CVE-2026-57965

A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service (DoS) for the virtual machine. This issue requires the SPICE host to be untrusted or compromised for exploitation.

• CWE-190

• https://access.redhat.com/security/cve/CVE-2026-57965Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2493581Issue Tracking, Vendor Advisory

Published

Jun 29, 2026

Last Modified

Jul 8, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-57959Hi.Events through 1.9.0 contains a promo code validation vul…8.2
• CVE-2026-5796GitLab has remediated an issue in GitLab CE/EE affecting all…4.3
• CVE-2026-57960Hi.Events through 1.9.0 public check-in list endpoints use s…8.3
• CVE-2026-57961phpMyFAQ before 4.1.5 contains a potential authenticated pat…5.1
• CVE-2026-57962A malicious LDAP server, which a Thunderbird user is configu…5.3
• CVE-2026-57963An attacker who can send HTML chat messages (via Matrix or X…6.5
• CVE-2026-57966A path traversal vulnerability was found in spice-vdagent. T…4.4
• CVE-2026-57968Buffer over-read in Windows Subsystem for Linux allows an au…7.8
• CVE-2026-57969Missing authentication for critical function in Azure CycleC…8.8
• CVE-2026-5797The Quiz And Survey Master plugin for WordPress is vulnerabl…5.3
• CVE-2026-57973Time-of-check time-of-use (toctou) race condition in Windows…4.7
• CVE-2026-57974Integer overflow or wraparound in Microsoft Edge (Chromium-b…8.8