CVE-2026-53359
Published: 2026-07-06 Description Description Severity Notes A virtualization vulnerability has been identified in the KVM x86 shadow paging and nested virtualization…
Published Oct 14, 2026 · Google Google Cloud
Published: 2026-07-06 Description Description Severity Notes A virtualization vulnerability has been identified in the KVM x86 shadow paging and nested virtualization configurations. Because an attacker operating a virtual machine with nested virtualization could escape hypervisor boundary isolation to compromise the underlying physical host, any x86 virtual machine (whether nested or non-nested) hosted on an Intel-based server supporting nested virtualization is potentially exposed. What should I do? Google is deploying live hypervisor hotpatches across all managed Compute Engine host servers
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 14, 2026 · Google Cloud Security Bulletins
Detected
Published: 2026-07-06 Description Description Severity Notes A virtualization vulnerability has been identified in the KVM x86 shadow paging and nested virtualization configurations. Because an attacker operating a virtual machine with nested virtualization could escape hypervisor boundary isolation to compromise the underlying physical host, any x86 virtual machine (whether nested or non-nested)
Sources
- CVE.orgVulnerability recordCVE-2026-53359
Official CVE identifier
cve.org - Google Cloud Security BulletinsVendor advisoryCVE-2026-53359
Published: 2026-07-06 Description Description Severity Notes A virtualization vulnerability has been identified in the KVM x86 shadow paging and nested virtualization configurations. Because an attacker operating a virtual machine with nested virtualization could escape hyperviso
docs.cloud.google.com