[ Vendor · 8 CVEs ]
Xen
CVEs affecting Xen published in the last 30 days, plus any Xen CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-79608 | 13 Oct 2026 | CVSS 9.8 | XenThe workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this… | |
| CVE-2026-79609 | 13 Oct 2026 | CVSS 8.8 | XenXPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254). This involves copying 64-bit PV guest… | |
| CVE-2026-79610 | 13 Oct 2026 | CVSS 8.8 | XenXSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> v1 -> v2 change has yet… | Fix |
| CVE-2026-79611 | 13 Oct 2026 | CVSS 5.5 | XenFor XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single… | |
| CVE-2026-79607 | 13 Oct 2026 | CVSS 5.5 | XenDuring Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an… | |
| CVE-2026-102699 | 13 Oct 2026 | CVSS 7.5 | Xen[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437… | |
| CVE-2026-102700 | 13 Oct 2026 | CVSS 4.7 | XenWith its original introduction, GNTTAB_cache_flush was made available uniformly. XSA-232 (CVE-2017-14318) then covered an omitted NULL pointer check… | Fix |
| CVE-2026-102702 | 13 Oct 2026 | CVSS 7.5 | Xen[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437… |