Zapscape (CVE-2026-64561)

The KVM Escape Trilogy

ITScape

(CVE‑2026‑46316)

Januscape

(CVE‑2026‑53359)

Zapscape

(CVE‑2026‑64561)

Zapscape: Guest-to-Host Escape in KVM/x86

Abstract

This document describes the Zapscape (CVE-2026-64561) vulnerability discovered and reported by Hyunwoo Kim (@v4bel). It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/x86 environment and run commands on the host with kernel (root) privilege.

... continue reading