Skip to contentXen vulnerabilities
Newest
- xen windows pv driversWinPVDrivers: Excessive permissions on user-exposed devicesCVE-2025-274639.4 Critical
- xen windows pv driversWinPVDrivers: Excessive permissions on user-exposed devicesCVE-2025-274629.4 Critical
- xenIncorrect removal of permissions on PCI device unplugCVE-2025-58149Fix available7.5 High
- xenx86: Incorrect input sanitisation in Viridian hypercallsCVE-2025-58148Fix available7.5 High
- xenx86: Incorrect input sanitisation in Viridian hypercallsCVE-2025-58147Fix available7.5 High
- xenArm issues with page refcountingCVE-2025-58145Fix available7.5 High
- xenArm issues with page refcountingCVE-2025-58144Fix available7.5 High
- xenMutiple vulnerabilities in the Viridian interfaceCVE-2025-58142Fix available9.8 Critical
- xenMutiple vulnerabilities in the Viridian interfaceCVE-2025-58143Fix available9.8 Critical
- xenMutiple vulnerabilities in the Viridian interfaceCVE-2025-27466Fix available9.8 Critical
- xenx86: Incorrect stubs exception handling for flags recoveryCVE-2025-27465Fix available4.3 Medium
- xendeadlock potential with VT-d and legacy PCI device pass-throughCVE-2025-1713Fix available7.5 High
- xen xapi, xen +1 moreXapi: Metadata injection attack against backup/restore functionalityCVE-2024-311443.8 Low
- xenlibxl leaks data to PVH guests via ACPI tablesCVE-2024-45819Fix available5.5 Medium
- xenDeadlock in x86 HVM standard VGA handlingCVE-2024-45818Fix available6.5 Medium
- xenx86: Deadlock in vlapic_error()CVE-2024-45817Fix available7.3 High
- xenPCI device pass-through with shared resourcesCVE-2024-31146Fix available7.5 High
- xenerror handling in x86 IOMMU identity mappingCVE-2024-31145Fix available7.5 High
- xendouble unlock in x86 guest IRQ handlingCVE-2024-31143Fix available7.5 High
- xen, fedoraproject fedora +1 morex86: Incorrect logic for BTC/SRSO mitigationsCVE-2024-31142Fix availableEPSS 17.4%7.5 High
- xen, fedoraproject fedora +1 morex86 HVM hypercalls may trigger Xen bug checkCVE-2023-46842Fix available6.5 Medium
- xenCVE-2024-2201CVE-2024-2201Fix available4.7 Medium
- amd cpu, xen +1 moreSpeculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.CVE-2024-2193Public exploitFix available5.7 Medium
- xen, fedoraproject fedora +1 morex86: shadow stack vs exceptions from emulation stubsCVE-2023-46841Fix available6.5 Medium
- xen, fedoraproject fedora +1 moreVT-d: Failure to quarantine devices in !HVM buildsCVE-2023-46840Fix available4.1 Medium
- fedoraproject fedora, xen +1 morepci: phantom functions assigned to incorrect contextsCVE-2023-46839Fix available5.3 Medium
- xenarm32: The cache may not be properly cleaned/invalidated (take two)CVE-2023-46837Fix available3.3 Low
- xenarm32: The cache may not be properly cleaned/invalidatedCVE-2023-34321Fix available3.3 Low
- arm cortex-a77 firmware, xen +1 morearm: Guests can trigger a deadlock on Cortex-A77CVE-2023-34320Fix available5.5 Medium
- xenx86: BTC/SRSO fixes not fully effectiveCVE-2023-46836Fix available4.7 Medium
- xenx86/AMD: mismatch in IOMMU quarantine page table levelsCVE-2023-46835Fix available5.5 Medium
- free software foundation grub-legacy, gnu grub, xen +2 moreMemory Corruption Vulnerability in Grub-Legacy's XFS ImplementationCVE-2023-49498.1 High
- xenx86/AMD: Debug Mask handlingCVE-2023-34328Fix available5.5 Medium
- xenx86/AMD: Debug Mask handlingCVE-2023-34327Fix available5.5 Medium
- xenx86/AMD: missing IOMMU TLB flushingCVE-2023-34326Fix available7.8 High
- xenMultiple vulnerabilities in libfsimage disk handlingCVE-2023-34325Fix available7.8 High
- xenxenstored: A transaction conflict can crash C XenstoredCVE-2023-34323Fix available5.5 Medium
- linux, linux kernel, xen +2 morePossible deadlock in Linux kernel event handlingCVE-2023-34324Fix available4.9 Medium
- xentop-level shadow reference dropped too early for 64-bit PV guestsCVE-2023-34322Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreLinux: buffer overrun in netback due to unusual packetCVE-2023-34319Fix available7.8 High
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon gold pro 3150g firmware +49 more +51 moreSpeculative LeaksCVE-2023-20588Fix availableEPSS 11.2%5.5 Medium
- debian linux, intel celeron 5205u firmware, celeron 5305u firmware +531 more +533 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-40982Fix available6.5 Medium
- debian linux, amd 2nd gen amd epyc™ processors, 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt +76 more +78 moreModerate: linux-firmware security updateCVE-2023-20593Public exploitFix available5.5 Medium
- adsanityplugin adsanity, xen +1 moreAdSanity < 1.8.2 - Authenticated Arbitrary File UploadCVE-2022-49498.8 High
- xenMishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family...CVE-2022-42336Fix available3.3 Low
- xen, fedoraproject fedora +1 morex86 shadow paging arbitrary pointer dereference In environments where host assisted address...CVE-2022-42335Fix available7.8 High
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...CVE-2022-42334Fix available6.5 Medium
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...CVE-2022-42333Fix available8.6 High
- xen, debian linux, fedoraproject fedora +2 morex86 shadow plus log-dirty mode use-after-free In environments where host assisted address...CVE-2022-42332Fix available7.8 High
- fedoraproject fedora, xen +1 morex86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original...CVE-2022-42331Fix available5.5 Medium
- Show moreLoading…