Loading vulnerability…
CVE-2026-66020 affects QEMU packages. Information about the technical cause, vulnerable functions, exploitation mechanism, and security impact is currently unavailable.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A medium-severity vulnerability in QEMU's virtio-gpu component involving blob scanouts during mapping cleanup. The listed CVSS v3.1 score is 6.6, indicating local access, low attack complexity, low privileges, no user interaction, and primarily availability impact. Fixes are identified, including one associated with version 10.0.14. All Amazon Linux package entries shown are marked Not Affected.
A high-severity vulnerability affecting QEMU packages, identified by Tenable Cloud Security plugin 473256. The content does not describe the technical cause or impact. A security update is available, and no known exploits are reported.
An unpatched vulnerability associated with the Debian QEMU package, covered by Nessus plugin 362915 and rated Medium severity. The vendor indicates it will not be patched. The reference provides no technical details about the flaw or its impact.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.