Vendors / Spice-space Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Spice-space records in CISA KEV No Spice-space vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 76
An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product.
CVSS 3.1 HIGH 8.6· Network · No auth · No interaction · EPSS 0.00842 · Published 2023-08-22 · Will not fix CWE-862
Priority LOW 34
spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00419 · Published 2018-01-20 · Will not fix CWE-78
Priority LOW 28
A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c.
CVSS 3.1 MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00314 · Published 2022-02-24 · Fix deferred CWE-416
Priority LOW 28
A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections.
CVSS 3.1 MEDIUM 6.3· Local · Low privileges · No interaction · EPSS 0.0033 · Published 2020-11-26 · Partial fix CWE-362
Priority LOW 28
A flaw was found in the SPICE file transfer protocol.
CVSS 3.1 MEDIUM 6.4· Local · Low privileges · No interaction · EPSS 0.00299 · Published 2020-11-26 · Partial fix CWE-362
Priority LOW 25
A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in `/run/spice-vdagentd/spice-vdagent-sock`.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00436 · Published 2020-11-26 · Partial fix CWE-770
Priority LOW 25
A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.005 · Published 2020-11-25 · Partial fix CWE-770
Priority LOW 22
A flaw was found in spice-vdagent.
CVSS 3.1 MEDIUM 5.1· Local · High privileges · No interaction · EPSS 0.00113 · Published 2026-06-29 · Fix deferred CWE-190
Priority LOW 19
A path traversal vulnerability was found in spice-vdagent.
CVSS 3.1 MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00126 · Published 2026-06-29 · Fix deferred CWE-22
Open these records in search → All records by CVSS severity
0 2 7 0 0
THREATIST.IORead the docs