CVE Daily – Ionic Framework (High+Critical) https://cvedaily.com/pages/tags/ionic.html CVE Daily – Ionic Framework (High+Critical) en Wed, 03 Jun 2026 21:26:48 +0000 [High] CVE-2025-62627 – An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could... https://nvd.nist.gov/vuln/detail/CVE-2025-62627 https://nvd.nist.gov/vuln/detail/CVE-2025-62627 Wed, 13 May 2026 04:17:35 +0000 High CVE-2025-62627

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability.

CVSS: 7.2 · CWE: CWE-822

View on NVD

]]> [High] CVE-2025-62624 – A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could all... https://nvd.nist.gov/vuln/detail/CVE-2025-62624 https://nvd.nist.gov/vuln/detail/CVE-2025-62624 Wed, 13 May 2026 04:17:35 +0000 High CVE-2025-62624

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

CVSS: 8.8 · CWE: CWE-122

View on NVD

]]> [High] CVE-2025-62623 – A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could all... https://nvd.nist.gov/vuln/detail/CVE-2025-62623 https://nvd.nist.gov/vuln/detail/CVE-2025-62623 Wed, 13 May 2026 04:17:35 +0000 High CVE-2025-62623

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2024-39502 – In the Linux kernel, the following vulnerability has been resolved: ionic: fix ... https://nvd.nist.gov/vuln/detail/CVE-2024-39502 https://nvd.nist.gov/vuln/detail/CVE-2024-39502 Fri, 12 Jul 2024 13:15:12 +0000 High CVE-2024-39502

In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netif_napi_del() When queues are started, netif_napi_add() and napi_enable() are called. If there are 4 queues and only 3 queues are used for the current configuration, only 3 queues' napi should be registered and enabled. The ionic_qcq_enable() checks whether the .poll pointer is not NULL for enabling only…

CVSS: 7.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2018-16202 – Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior... https://nvd.nist.gov/vuln/detail/CVE-2018-16202 https://nvd.nist.gov/vuln/detail/CVE-2018-16202 Wed, 09 Jan 2019 23:29:04 +0000 High CVE-2018-16202

Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior to 2.2.0 (not including 2.0.0-beta.0, 2.0.0-beta.1, 2.0.0-beta.2, and 2.1.0-0) allows remote attackers to access arbitrary files via unspecified vectors.

CVSS: 8.6 · CWE: CWE-22

View on NVD

]]> [Critical] CVE-2018-1000123 – Ionic Team Cordova plugin iOS Keychain version before commit 18233ca25dfa92cca01... https://nvd.nist.gov/vuln/detail/CVE-2018-1000123 https://nvd.nist.gov/vuln/detail/CVE-2018-1000123 Tue, 13 Mar 2018 21:29:00 +0000 Critical CVE-2018-1000123

Ionic Team Cordova plugin iOS Keychain version before commit 18233ca25dfa92cca018b9c0935f43f78fd77fbf contains an Information Exposure Through Log Files (CWE-532) vulnerability in CDVKeychain.m that can result in login, password and other sensitive data leakage. This attack appear to be exploitable via Attacker must have access to victim's iOS logs. This vulnerability appears to have been fixed i…

CVSS: 9.8 · CWE: CWE-532

View on NVD

]]>