
The discovery remains a significant blow to the perceived invincibility of KVM-based isolation, prompting niche vendors to highlight the massive attack surface of the Linux kernel. Identified as CVE-2026-99999 and colloquially named PwnEscape, this vulnerability carries a critical CVSS score of 9.3, signaling an immediate threat to global cloud infrastructure. This flaw targets the Kernel-based Virtual Machine, or KVM, which










