Log in Start free

Xen

Products

ProductCVEsExploitedLatest
Xen142–Nov 4, 2026
XAPI6–Jul 9, 2026
Windows PV drivers3–Jul 9, 2026
oxenstored1–Jul 9, 2026
varstored1–Jul 9, 2026

Exploited and recent CVEs

  • CVE-2026-102704 Medium 4.4 arbitrary read/write via grant copy 0.1%
  • CVE-2026-102703 Medium 4.4 arbitrary read/write via grant copy 0.1%
  • CVE-2026-102700 Medium 4.7 gnttab: cache-flush handling may cause page reference leak 0.1%
  • CVE-2026-102702 High 7.5 Arm: multiple issues with GNTTABOP_cache_flush 0.3%
  • CVE-2026-102699 High 7.5 Arm: multiple issues with GNTTABOP_cache_flush 0.3%
  • CVE-2026-79611 Medium 5.5 VMX: VMentry failure with branch tracing and blocked states 0.2%
  • CVE-2026-79610 High 8.8 grant-table: double version change race 0.1%
  • CVE-2026-79609 High 8.8 x86: XPTI may break on huge-memory systems 0.1%
  • CVE-2026-79608 Critical 9.8 x86/AMD: ineffectual Zenbleed workaround 0.3%
  • CVE-2026-79607 Medium 5.5 Xenstore: Guests can crash xenstored during Live Update 0.1%
  • CVE-2026-79603 Medium 4.3 Unconditionally do TLB flushing ahead of page scrubbing 0.2%
  • CVE-2026-79602 High 8.8 x86: improper handling of HVM emulation return codes 0.1%
  • CVE-2026-62437 Medium 6.5 x86: DMs may cause mem leak by IRQ binding <0.1%
  • CVE-2026-62434 Medium 5.3 PoD: Don't try to reclaim special pages 0.4%
  • CVE-2026-62433 High 7.3 correct buffer checks for DM_OP hypercalls 0.3%
  • CVE-2026-62432 High 7.3 evtchn: Race between FIFO expand and reset 0.2%
  • CVE-2026-62431 High 7.5 Viridian STIMER division by zero 0.4%
  • CVE-2026-62430 High 7.5 x86: Out-of-bounds read in vRTC emulation 0.2%
  • CVE-2026-62429 Medium 6.5 vNUMA domain cleanup may race other operations 0.2%
  • CVE-2026-62436 Medium 6.5 grant-table: version change racing with other operations 0.2%
  • CVE-2026-62435 Medium 6.5 grant-table: version change racing with other operations 0.2%
  • CVE-2026-62428 High 7.8 grant-table: type confusion in grant-copy 0.1%
  • CVE-2026-62427 High 8.8 sysctl and platform-op locks open to abuse 0.2%
  • CVE-2026-62426 High 8.8 sysctl and platform-op locks open to abuse 0.2%
  • CVE-2026-62425 Medium 5.5 buffer overruns in libfsimage iso9660 handling 0.2%
  • CVE-2026-62424 Medium 5.5 buffer overruns in libfsimage iso9660 handling 0.2%
  • CVE-2026-62423 Medium 5.5 buffer overruns in libfsimage iso9660 handling 0.2%
  • CVE-2026-42495 Medium 5.5 buffer overruns in libfsimage iso9660 handling 0.2%
  • CVE-2026-42494 Medium 6.1 buffer overruns in libfsimage iso9660 handling 0.1%
  • CVE-2026-42492 High 7.5 vIRQ event channel binding may break Xenstore 0.6%