Xen Project

Products

ProductCVEsExploitedLatest
Xen2–Feb 14, 2025

Exploited and recent CVEs

  • CVE-2024-31144 Low 3.8 Xapi: Metadata injection attack against backup/restore functionality 0.2%
  • CVE-2021-28703 Unrated grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associat 0.3%