Xen vulnerabilities

Products

• Xen 528
• Xapi 9
• Windows Pv Drivers 3

Newest

• xen arbitrary read/write via grant copy CVE-2026-102704 Fix available 4.4 MediumNovember 3, 2026
• xen arbitrary read/write via grant copy CVE-2026-102703 Fix available 4.4 MediumNovember 3, 2026
• xen Arm: multiple issues with GNTTABOP_cache_flush CVE-2026-102702 Fix available 7.5 HighOctober 13, 2026
• xen Arm: multiple issues with GNTTABOP_cache_flush CVE-2026-102699 Fix available 7.5 HighOctober 13, 2026
• xen x86/AMD: ineffectual Zenbleed workaround CVE-2026-79608 Fix available 9.8 CriticalOctober 13, 2026
• xen Xenstore: Guests can crash xenstored during Live Update CVE-2026-79607 5.5 MediumOctober 13, 2026
• xen VMX: VMentry failure with branch tracing and blocked states CVE-2026-79611 Fix available 5.5 MediumOctober 13, 2026
• xen grant-table: double version change race CVE-2026-79610 Fix available 8.8 HighOctober 13, 2026
• xen x86: XPTI may break on huge-memory systems CVE-2026-79609 Fix available 8.8 HighOctober 13, 2026
• xen gnttab: cache-flush handling may cause page reference leak CVE-2026-102700 Fix available 4.7 MediumOctober 13, 2026
• xen Unconditionally do TLB flushing ahead of page scrubbing CVE-2026-79603 Fix available 4.3 MediumSeptember 8, 2026
• xen x86: improper handling of HVM emulation return codes CVE-2026-79602 Fix available 8.8 HighSeptember 8, 2026
• xen x86: DMs may cause mem leak by IRQ binding CVE-2026-62437 Fix available 6.5 MediumSeptember 8, 2026
• xen PoD: Don't try to reclaim special pages CVE-2026-62434 Fix available 5.3 MediumJuly 28, 2026
• xen correct buffer checks for DM_OP hypercalls CVE-2026-62433 Fix available 7.3 HighJuly 28, 2026
• xen evtchn: Race between FIFO expand and reset CVE-2026-62432 Fix available 7.3 HighJuly 28, 2026
• xen Viridian STIMER division by zero CVE-2026-62431 Fix available 7.5 HighJuly 28, 2026
• xen x86: Out-of-bounds read in vRTC emulation CVE-2026-62430 Fix available 7.5 HighJuly 28, 2026
• xen vNUMA domain cleanup may race other operations CVE-2026-62429 Fix available 6.5 MediumJuly 28, 2026
• xen grant-table: version change racing with other operations CVE-2026-62436 Fix available 6.5 MediumJuly 28, 2026
• xen grant-table: version change racing with other operations CVE-2026-62435 Fix available 6.5 MediumJuly 28, 2026
• xen grant-table: type confusion in grant-copy CVE-2026-62428 Fix available 7.8 HighJuly 28, 2026
• xen sysctl and platform-op locks open to abuse CVE-2026-62427 Fix available 8.8 HighJuly 28, 2026
• xen sysctl and platform-op locks open to abuse CVE-2026-62426 Fix available 8.8 HighJuly 28, 2026
• xen buffer overruns in libfsimage iso9660 handling CVE-2026-62425 Fix available 5.5 MediumJuly 28, 2026
• xen buffer overruns in libfsimage iso9660 handling CVE-2026-62424 Fix available 5.5 MediumJuly 28, 2026
• xen buffer overruns in libfsimage iso9660 handling CVE-2026-62423 Fix available 5.5 MediumJuly 28, 2026
• xen buffer overruns in libfsimage iso9660 handling CVE-2026-42495 Fix available 5.5 MediumJuly 28, 2026
• xen buffer overruns in libfsimage iso9660 handling CVE-2026-42494 Fix available 6.1 MediumJuly 28, 2026
• xen vIRQ event channel binding may break Xenstore CVE-2026-42492 Fix available 7.5 HighJuly 28, 2026
• xen x86 shadow paging is deprecated CVE-2026-42493 Fix available 7.5 HighJuly 28, 2026
• xapi Multiple RBAC issues in XAPI CVE-2026-42486 9.4 CriticalJuly 9, 2026
• xapi Multiple RBAC issues in XAPI CVE-2026-23562 9.4 CriticalJuly 9, 2026
• xapi Multiple RBAC issues in XAPI CVE-2026-23561 9.4 CriticalJuly 9, 2026
• xapi Multiple RBAC issues in XAPI CVE-2026-23560 9.4 CriticalJuly 9, 2026
• xapi Multiple RBAC issues in XAPI CVE-2026-23559 9.4 CriticalJuly 9, 2026
• xen oxenstored oxenstored keeps quota related use counts across domain destruction CVE-2026-23556 Fix available 9.4 CriticalJuly 9, 2026
• xen varstored varstored: TOCTOU issues with mapped guest memory CVE-2025-58151 9.4 CriticalJuly 9, 2026
• xen domctl lock open to abuse CVE-2026-42490 Fix available 6.5 MediumJune 10, 2026
• xen domctl lock open to abuse CVE-2026-42489 Fix available 5.3 MediumJune 10, 2026
• xen x86: mismatched mapcache metadata CVE-2026-42488 Fix available 8.1 HighJune 10, 2026
• xen x86 HVM I/O port list traversal CVE-2026-42487 Fix available 7.9 HighJune 10, 2026
• xen grant table v2 race in status page mapping CVE-2026-23558 Fix available 7.8 HighApril 28, 2026
• xen Xenstored DoS via XS_RESET_WATCHES command CVE-2026-23557 Fix available 6.5 MediumApril 28, 2026
• xen Xenstored DoS by unprivileged domain CVE-2026-23555 Fix available 7.1 HighMarch 17, 2026
• xen Use after free of paging structures in EPT CVE-2026-23554 Fix available 7.8 HighMarch 17, 2026
• xen x86: incomplete IBPB for vCPU isolation CVE-2026-23553 Fix available 2.9 LowJanuary 27, 2026
• xen x86: buffer overrun with shadow paging + tracing CVE-2025-58150 Fix available 8.8 HighJanuary 27, 2026
• xapi XAPI UTF-8 string handling CVE-2025-58146 9.4 CriticalNovember 9, 2025
• xen windows pv drivers WinPVDrivers: Excessive permissions on user-exposed devices CVE-2025-27464 9.4 CriticalNovember 9, 2025
• Show olderLoading…