XE
Product
Xen
490
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 16High 134Medium 162Low 11
Watch
Add Xen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-10921 | 10.0 | Jul 5 | The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a… Affected: through 4.8.1 |
| CVE-2017-10920 | 10.0 | Jul 5 | The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS… Affected: through 4.8.1 |
| CVE-2017-10918 | 10.0 | Jul 5 | Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222 Affected: through 4.8.1 |
| CVE-2017-10912 | 10.0 | Jul 5 | Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217 Affected: through 4.8.1 |
| CVE-2015-8104 | 10.0 | Nov 16 | The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB… Affected: 4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; 4.4.0; +11 more |
| CVE-2017-2620 | 9.9 | Jul 27 | Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue Affected: through 4.7.1; 4.7.1; 4.7.1; 4.7.1; 4.7.1; 4.7.1; +2 more |
| CVE-2018-12892 | 9.9 | Jul 2 | An issue was discovered in Xen 4.7 through 4.10.x Affected: 4.7.0 through 4.10.1 |
| CVE-2025-58143 | 9.8 | Sep 11 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling… Affected: 4.13.0 before 4.17.0 |
| CVE-2025-58142 | 9.8 | Sep 11 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling… Affected: 4.13.0 before 4.17.0 |
| CVE-2025-27466 | 9.8 | Sep 11 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling… Affected: 4.13.0 before 4.17.0 |
| CVE-2019-18425 | 9.8 | Oct 31 | An issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS privileges by installing and using descriptors Affected: through 4.12.1 |
| CVE-2017-10913 | 9.8 | Jul 5 | The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive… Affected: through 4.8.1 |
| CVE-2017-2615 | 9.1 | Jul 3 | Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue Affected: through 4.7.1; 4.7.1; 4.7.1; 4.7.1; 4.7.1 |
| CVE-2017-15597 | 9.1 | Oct 30 | An issue was discovered in Xen through 4.9.x Affected: through 4.9.0 |
| CVE-2017-10917 | 9.1 | Jul 5 | Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS… Affected: through 4.8.1 |
| CVE-2017-10915 | 9.0 | Jul 5 | The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka… Affected: through 4.8.1 |
| CVE-2025-58150 | 8.8 | Jan 28 | Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing Affected: All versions, or not specified |
| CVE-2022-4949 | 8.8 | Jun 7 | The AdSanity plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'ajax_upload' function in versions up to, and including, 1.8.1 Affected: All versions, or not specified |
| CVE-2022-42309 | 8.8 | Nov 1 | Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during node creation in an error path,… Affected: All versions, or not specified |
| CVE-2022-33745 | 8.8 | Jul 26 | insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode Affected: All versions, or not specified |
| CVE-2021-28708 | 8.8 | Nov 24 | PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH… Affected: 4.7.0 through 4.15.1 |
| CVE-2021-28707 | 8.8 | Nov 24 | PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH… Affected: 4.7.0 through 4.15.1 |
| CVE-2021-28704 | 8.8 | Nov 24 | PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH… Affected: 4.7.0 through 4.15.1 |
| CVE-2021-28710 | 8.8 | Nov 21 | certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structures (page tables) may (and, on suitable hardware, by default… Affected: 4.15.0 |
| CVE-2020-29481 | 8.8 | Dec 15 | An issue was discovered in Xen through 4.14.x Affected: through 4.14.0 |
| CVE-2020-29479 | 8.8 | Dec 15 | An issue was discovered in Xen through 4.14.x Affected: through 4.14.0 |
| CVE-2020-29569 | 8.8 | Dec 15 | An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x Affected: through 4.14.1 |
| CVE-2020-29040 | 8.8 | Nov 24 | An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption), cause a data leak, or possibly gain privileges… Affected: through 4.14.0 |
| CVE-2020-15565 | 8.8 | Jul 7 | An issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a host OS denial of service or possibly gain privileges because of insufficient cache… Affected: 3.2.0 through 4.13.1 |
| CVE-2020-11741 | 8.8 | Apr 14 | An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active profiling) to obtain sensitive information about other guests, cause a denial of… Affected: through 4.13.0; 4.13.0; 4.13.0 |
| CVE-2019-19578 | 8.8 | Dec 11 | An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of service via degenerate chains of linear pagetables, because of an incorrect fix… Affected: through 4.12.1 |
| CVE-2019-18423 | 8.8 | Oct 31 | An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service via a XENMEM_add_to_physmap hypercall Affected: 4.8 through 4.12.1 |
| CVE-2019-18422 | 8.8 | Oct 31 | An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service or gain privileges by leveraging the erroneous enabling of interrupts Affected: through 4.12.1 |
| CVE-2019-17346 | 8.8 | Oct 8 | An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context… Affected: through 4.11.2 |
| CVE-2019-17340 | 8.8 | Oct 8 | An issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of service or gain privileges because grant-table transfer requests are mishandled Affected: 3.2.0 through 4.11.2 |
| CVE-2018-19966 | 8.8 | Dec 8 | An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an… Affected: 4.11.0 through 4.11.1 |
| CVE-2018-18883 | 8.8 | Nov 1 | An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or… Affected: 4.9.0 through 4.11.0 |
| CVE-2018-10982 | 8.8 | May 10 | An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt number, array overrun, and hypervisor… Affected: through 4.10.1 |
| CVE-2018-7541 | 8.8 | Feb 27 | An issue was discovered in Xen through 4.10.x allowing guest OS users to cause a denial of service (hypervisor crash) or gain privileges by triggering a grant-table transition… Affected: through 4.10.0 |
| CVE-2017-17045 | 8.8 | Nov 28 | An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and… Affected: through 4.9.1 |
| CVE-2017-15595 | 8.8 | Oct 18 | An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consumption, and hypervisor crash) or possibly… Affected: through 4.9.0 |
| CVE-2017-15594 | 8.8 | Oct 18 | An issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial of service (hypervisor crash) or gain privileges because IDT settings are… Affected: through 4.9.0 |
| CVE-2017-15592 | 8.8 | Oct 18 | An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because self-linear shadow… Affected: through 4.9.0 |
| CVE-2017-15590 | 8.8 | Oct 18 | An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was… Affected: 4.9.0 |
| CVE-2015-7504 | 8.8 | Oct 16 | Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute… Affected: All versions, or not specified |
| CVE-2017-14319 | 8.8 | Sep 12 | A grant unmapping issue was discovered in Xen through 4.9.x Affected: through 4.9.0 |
| CVE-2017-14316 | 8.8 | Sep 12 | A parameter verification issue was discovered in Xen through 4.9.x Affected: through 4.9.0 |
| CVE-2017-12137 | 8.8 | Aug 24 | arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref Affected: All versions, or not specified |
| CVE-2017-12135 | 8.8 | Aug 24 | Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants Affected: All versions, or not specified |
| CVE-2017-12134 | 8.8 | Aug 24 | The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive… Affected: All versions, or not specified |