By vendor

Spice-Space vulnerabilities

Known CVEs affecting Spice-Space products, prioritized by severity, with SEC.co remediation and detection guidance.

2 published vulnerabilities

• CVE-2026-57965MEDIUM 5.1

  CVE-2026-57965 is a medium-severity vulnerability in spice-vdagent, a guest-side agent daemon used in virtualized environments to provide features like clipboard sharing and USB redirection. An attacker who controls or compromises the SPICE (Simple Protocol for Independent Computing Environments) host can craft a malicious network message that causes an integer overflow, leading to a heap buffer overflow in the vdagent daemon. This crash results in denial of service to the virtual machine. The vulnerability requires the host to be untrusted or already compromised, limiting exposure in typical well-managed hypervisor environments, but it represents a privilege escalation vector if host compromise occurs.

• CVE-2026-57966MEDIUM 4.4

  A path traversal flaw in spice-vdagent allows a malicious or compromised SPICE host to write arbitrary files anywhere on a guest system. When a SPICE host initiates a file transfer, the agent doesn't validate the filename, enabling an attacker to place files in sensitive directories with the privileges of the logged-in user. This is a real but constrained risk: it requires either control of or a compromise of the SPICE host itself, not just network access.