[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFJkredrhGeBGKAFLDadDd5GANW_SbmtkVZ4L-eVrn9U":3,"g5a-ex:mobyproject\u002Fhyperkit@*":118,"g5a-family:mobyproject\u002Fhyperkit":120},{"success":4,"data":5},true,{"product":6,"versions":50,"topVulnerabilitiesByEpss":68,"kevVulnerabilities":95,"seoMetadata":96,"meta":115},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":49},"mobyproject","hyperkit",17,5,0,"2023-02-20",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.20170214",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.20170227",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.20170425",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.20170511",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.20170519",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.20170904",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.20171020",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.20171204",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.20180123",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.20180223",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"0.20180403",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"0.20180621",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"0.20190201",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"0.20190802",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"0.20200224",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"0.20200908",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"0.20210107","Hyperkit by Mobyproject is a technology product with 17 tracked versions and 5 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},[69,76,83,87,92],{"cveId":70,"description":71,"publishedDate":12,"cvssScore":72,"cvssVersion":73,"severity":74,"isKev":16,"epssScore":75},"CVE-2021-32847","HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior, a malicious guest can trigger a vulnerability in the host by abusing the disk driver that may lead to the disclosure of the host memory into the virtualized guest. This issue is fixed in commit cf60095a4d8c3cb2e182a14415467afd356e982f.",6.5,"v3.1","Medium",0.00369,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":73,"severity":81,"isKev":16,"epssScore":82},"CVE-2021-32846","HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107, function `pci_vtsock_proc_tx` in `virtio-sock` can lead to to uninitialized memory use. In this situation, there is a check for the return value to be less or equal to `VTSOCK_MAXSEGS`, but that check is not sufficient because the function can return `-1` if it finds an error it cannot recover from. Moreover, the negative return value will be used by `iovec_pull` in a while condition that can further lead to more corruption because the function is not designed to handle a negative `iov_len`. This issue may lead to a guest crashing the host causing a denial of service and, under certain circumstance, memory corruption. This issue is fixed in commit af5eba2360a7351c08dfd9767d9be863a50ebaba.","2023-02-17",7.8,"High",0.00317,{"cveId":84,"description":85,"publishedDate":79,"cvssScore":80,"cvssVersion":73,"severity":81,"isKev":16,"epssScore":86},"CVE-2021-32845","HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, the implementation of `qnotify` at `pci_vtrnd_notify` fails to check the return value of `vq_getchain`. This leads to `struct iovec iov;` being uninitialized and used to read memory in `len = (int) read(sc->vrsc_fd, iov.iov_base, iov.iov_len);` when an attacker is able to make `vq_getchain` fail. This issue may lead to a guest crashing the host causing a denial of service and, under certain circumstance, memory corruption. This issue is fixed in commit 41272a980197917df8e58ff90642d14dec8fe948.",0.0025,{"cveId":88,"description":89,"publishedDate":79,"cvssScore":90,"cvssVersion":73,"severity":74,"isKev":16,"epssScore":91},"CVE-2021-32843","HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, `virtio.c` has is a call to `vc_cfgread` that does not check for null which when called makes the host crash. This issue may lead to a guest crashing the host causing a denial of service. This issue is fixed in commit df0e46c7dbfd81a957d85e449ba41b52f6f7beb4.",5.5,0.00234,{"cveId":93,"description":94,"publishedDate":79,"cvssScore":90,"cvssVersion":73,"severity":74,"isKev":16,"epssScore":91},"CVE-2021-32844","HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, ` vi_pci_write` has is a call to `vc_cfgwrite` that does not check for null which when called makes the host crash. This issue may lead to a guest crashing the host causing a denial of service. This issue is fixed in commit 451558fe8aaa8b24e02e34106e3bb9fe41d7ad13.",[],{"title":97,"metaDescription":98,"keywords":99,"structuredData":100},"Hyperkit by Mobyproject - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Hyperkit by Mobyproject covering 17 versions with 5 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Hyperkit vulnerabilities, Hyperkit security, Hyperkit CVE, Mobyproject Hyperkit, Hyperkit threat intelligence, Mobyproject security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":101,"@type":102,"name":103,"description":98,"url":104,"manufacturer":105,"applicationCategory":109,"softwareVersion":110,"mainEntity":111},"https:\u002F\u002Fschema.org","SoftwareApplication","Hyperkit","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmobyproject\u002Fhyperkit",{"@type":106,"name":107,"url":108},"Organization","Mobyproject","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmobyproject","Security Software","17 versions tracked",{"@type":112,"name":113,"description":114,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Hyperkit Security Vulnerabilities","Security vulnerabilities affecting Hyperkit by Mobyproject",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":116,"apiVersion":117},"2026-10-17T10:27:16.186Z","3.0",{"rows":119,"total":11,"capped":16,"failed":11},[],[]]