Xen Xen

• CVE-2026-102704 Medium 4.4 arbitrary read/write via grant copy 0.1%
• CVE-2026-102703 Medium 4.4 arbitrary read/write via grant copy 0.1%
• CVE-2026-102700 Medium 4.7 gnttab: cache-flush handling may cause page reference leak 0.1%
• CVE-2026-102702 High 7.5 Arm: multiple issues with GNTTABOP_cache_flush 0.3%
• CVE-2026-102699 High 7.5 Arm: multiple issues with GNTTABOP_cache_flush 0.3%
• CVE-2026-79611 Medium 5.5 VMX: VMentry failure with branch tracing and blocked states 0.2%
• CVE-2026-79610 High 8.8 grant-table: double version change race 0.1%
• CVE-2026-79609 High 8.8 x86: XPTI may break on huge-memory systems 0.1%
• CVE-2026-79608 Critical 9.8 x86/AMD: ineffectual Zenbleed workaround 0.3%
• CVE-2026-79607 Medium 5.5 Xenstore: Guests can crash xenstored during Live Update 0.1%
• CVE-2026-79603 Medium 4.3 Unconditionally do TLB flushing ahead of page scrubbing 0.2%
• CVE-2026-79602 High 8.8 x86: improper handling of HVM emulation return codes 0.1%
• CVE-2026-62437 Medium 6.5 x86: DMs may cause mem leak by IRQ binding <0.1%
• CVE-2026-62434 Medium 5.3 PoD: Don't try to reclaim special pages 0.4%
• CVE-2026-62433 High 7.3 correct buffer checks for DM_OP hypercalls 0.3%
• CVE-2026-62432 High 7.3 evtchn: Race between FIFO expand and reset 0.2%
• CVE-2026-62431 High 7.5 Viridian STIMER division by zero 0.4%
• CVE-2026-62430 High 7.5 x86: Out-of-bounds read in vRTC emulation 0.2%
• CVE-2026-62429 Medium 6.5 vNUMA domain cleanup may race other operations 0.2%
• CVE-2026-62436 Medium 6.5 grant-table: version change racing with other operations 0.2%
• CVE-2026-62435 Medium 6.5 grant-table: version change racing with other operations 0.2%
• CVE-2026-62428 High 7.8 grant-table: type confusion in grant-copy 0.1%
• CVE-2026-62427 High 8.8 sysctl and platform-op locks open to abuse 0.2%
• CVE-2026-62426 High 8.8 sysctl and platform-op locks open to abuse 0.2%
• CVE-2026-62425 Medium 5.5 buffer overruns in libfsimage iso9660 handling 0.2%
• CVE-2026-62424 Medium 5.5 buffer overruns in libfsimage iso9660 handling 0.2%
• CVE-2026-62423 Medium 5.5 buffer overruns in libfsimage iso9660 handling 0.2%
• CVE-2026-42495 Medium 5.5 buffer overruns in libfsimage iso9660 handling 0.2%
• CVE-2026-42494 Medium 6.1 buffer overruns in libfsimage iso9660 handling 0.1%
• CVE-2026-42492 High 7.5 vIRQ event channel binding may break Xenstore 0.6%
• CVE-2026-42493 High 7.5 x86 shadow paging is deprecated 0.4%
• CVE-2026-42488 High 8.1 x86: mismatched mapcache metadata 0.4%
• CVE-2026-42490 Medium 6.5 domctl lock open to abuse 0.2%
• CVE-2026-42489 Medium 5.3 domctl lock open to abuse <0.1%
• CVE-2026-42487 High 7.9 x86 HVM I/O port list traversal <0.1%
• CVE-2026-23558 High 7.8 grant table v2 race in status page mapping 0.1%
• CVE-2026-23557 Medium 6.5 Xenstored DoS via XS_RESET_WATCHES command 0.2%
• CVE-2026-23555 High 7.1 Xenstored DoS by unprivileged domain 0.2%
• CVE-2026-23554 High 7.8 Use after free of paging structures in EPT 0.1%
• CVE-2026-23553 Low 2.9 x86: incomplete IBPB for vCPU isolation 0.1%
• CVE-2025-58150 High 8.8 x86: buffer overrun with shadow paging + tracing 0.1%
• CVE-2025-58149 High 7.5 Incorrect removal of permissions on PCI device unplug 0.4%
• CVE-2025-58148 High 7.5 x86: Incorrect input sanitisation in Viridian hypercalls 0.4%
• CVE-2025-58147 High 7.5 x86: Incorrect input sanitisation in Viridian hypercalls 0.4%
• CVE-2025-58145 High 7.5 Arm issues with page refcounting 0.4%
• CVE-2025-58144 High 7.5 Arm issues with page refcounting 0.5%
• CVE-2025-58143 Critical 9.8 Mutiple vulnerabilities in the Viridian interface 0.4%
• CVE-2025-58142 Critical 9.8 Mutiple vulnerabilities in the Viridian interface 0.5%
• CVE-2025-27466 Critical 9.8 Mutiple vulnerabilities in the Viridian interface 0.5%
• CVE-2025-1713 High 7.5 deadlock potential with VT-d and legacy PCI device pass-through 0.9%