Loading story…
Bitdefender disclosed VA-13905, covering two high-severity out-of-bounds write flaws in the Napoca bare-metal hypervisor that allow a malicious guest in real mode to write past the 1 MB RealModeMemory buffer and corrupt adjacent hypervisor heap memory. The issues were assigned CVE-2026-10046 and CVE-2026-10047, both classified as CWE-787. In one case, the BIOS INT 0x15 / E820 memory map handler in napoca/guests/bios_handlers.c uses guest-controlled ES and EDI values to calculate a destination offset without validating that the address remains inside the allocated buffer.
See affected versions and whether adversaries are exploiting it.
3 events from the most recent confirmed update back to the earliest known activity.
CVE-2026-10047 was assigned for an out-of-bounds write in Bitdefender Napoca's real-mode hook handler, where a guest-controlled SS:SP-derived offset can exceed the 1 MB RealModeMemory buffer and overwrite adjacent hypervisor heap memory during an IRET frame push. The reference classifies the issue as CWE-787 and states the product was end-of-life and unsupported when assigned.
CVE-2026-10046 was assigned for an out-of-bounds write in Bitdefender Napoca's BIOS INT 0x15 / E820 memory map handler, where guest-controlled ES and EDI values can cause writes past the 1 MB RealModeMemory buffer into hypervisor heap memory. The reference notes the affected product was end-of-life and unsupported when the CVE was assigned.
Bitdefender published security advisory VA-13905 covering out-of-bounds write vulnerabilities in the Napoca bare-metal hypervisor, including issues in the real-mode hook handler and BIOS INT 0x15 / E820 memory map handler.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
cvefeed.io
Open sourcecvefeed.io
Open sourcebitdefender.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A long-standing flaw in Linux `KVM/x86` shadow paging, tracked as **CVE-2026-53359** and dubbed **Januscape**, can let a guest corrupt host kernel memory and potentially escape isolation. The bug is a use-after-free in KVM shadow MMU emulation caused by incomplete cleanup logic that left stale references to freed page-table tracking structures; reporting indicates earlier validation checked only the guest frame number and not the page role. The issue affects both Intel and AMD hosts, has reportedly existed since Linux kernel `2.6.36`, and was disclosed as a vulnerability that can be triggered solely through guest-side actions.
Aug 25, 2026
Oracle VirtualBox's emulated Intel PRO/1000 MT Desktop (`E1000`) network adapter was found to contain multiple security flaws that let attackers abuse packet-processing logic from inside a guest VM. One issue, tracked as **`CVE-2020-2894`**, affects VirtualBox 6.1.0 and stems from improper validation in `e1kInsertChecksum()`, allowing checksum operations to read beyond a packet buffer and disclose adjacent memory. By manipulating checksum end offsets, an attacker in a guest can leak host-side data incrementally through the virtual NIC path. A separate flaw, **`CVE-2019-2722`**, impacts VirtualBox 5.2.28 and earlier and 6.0.6 and earlier, where an integer underflow in `e1kFallbackAddToFrame()` can trigger a heap out-of-bounds write in host memory. An attacker with root or administrator privileges in the guest can craft transmit descriptors to corrupt host memory and potentially escape the VM to host ring 3. Both vulnerabilities were disclosed through Trend Micro Zero Day Initiative's **Pwn2Own** program, and Oracle released fixes through its security update process.
Jun 29, 2026
A public disclosure detailed **Zapscape**, tracked as `CVE-2026-64561`, a guest-to-host escape vulnerability in **KVM/x86** caused by a use-after-free in shadow MMU emulation. The flaw occurs in the recursive shadow-page "zap" path and can be triggered through guest-side actions alone, allowing corruption of host kernel shadow pages and breaking guest-host isolation. The issue affects both **Intel** and **AMD** hosts; on Intel, exploitation requires that EPT page walk lengths 4 and 5 are both exposed to the L1 guest, while no equivalent constraint was noted for AMD. The disclosure warns that systems running untrusted guests with nested virtualization enabled are at particular risk, including multi-tenant x86 public cloud environments. Hyunwoo Kim reported the bug to the Linux kernel security team, and the issue has been patched in mainline Linux. The affected range spans from commit `f95eec9bed76` through `2abd5287f083`, covering code introduced in 2020 and remaining exposed until the July 2026 fix referenced on kernel.org.
Aug 7, 2026