XE
Product
Xen
490
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 16High 134Medium 162Low 11
Watch
Add Xen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-8897 | 7.8 | May 8 | A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all… Affected: All versions, or not specified |
| CVE-2017-17566 | 7.8 | Dec 12 | An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) or gain host OS privileges in shadow mode by mapping a certain… Affected: through 4.9.1 |
| CVE-2017-17564 | 7.8 | Dec 12 | An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging incorrect error handling… Affected: through 4.9.1 |
| CVE-2017-17563 | 7.8 | Dec 12 | An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging an incorrect mask for… Affected: through 4.9.1 |
| CVE-2017-15588 | 7.8 | Oct 18 | An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that can cause a stale TLB entry Affected: 4.9.0 |
| CVE-2017-12136 | 7.8 | Aug 24 | Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain… Affected: 4.6.0; 4.6.1; 4.6.3; 4.6.4; 4.6.5; 4.6.6; +7 more |
| CVE-2016-10013 | 7.8 | Jan 26 | Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation Affected: through 4.8.0 |
| CVE-2016-9386 | 7.8 | Jan 23 | The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors… Affected: All versions, or not specified |
| CVE-2016-9382 | 7.8 | Jan 23 | Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash)… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.1.0; +33 more |
| CVE-2016-3157 | 7.8 | Apr 12 | The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to… Affected: 4.0.0 |
| CVE-2021-28702 | 7.6 | Oct 6 | PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") Affected: 4.13.0 through 4.15.1 |
| CVE-2025-58149 | 7.5 | Oct 31 | Incorrect removal of permissions on PCI device unplug Affected: 4.0.0 and later |
| CVE-2025-58148 | 7.5 | Oct 31 | x86: Incorrect input sanitisation in Viridian hypercalls Affected: 4.15.0 and later |
| CVE-2025-58147 | 7.5 | Oct 31 | x86: Incorrect input sanitisation in Viridian hypercalls Affected: 4.15.0 and later |
| CVE-2025-58145 | 7.5 | Sep 11 | Arm issues with page refcounting Affected: 4.12.0 before 4.17.0 |
| CVE-2025-58144 | 7.5 | Sep 11 | Arm issues with page refcounting Affected: 4.12.0 before 4.17.0 |
| CVE-2025-1713 | 7.5 | Jul 17 | When setting up interrupt remapping for legacy PCI(-X) devices, including PCI(-X) bridges, a lookup of the upstream bridge is required Affected: 4.0.0 and later |
| CVE-2024-31146 | 7.5 | Sep 25 | When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective guests individually cannot really be… Affected: All versions, or not specified |
| CVE-2024-31145 | 7.5 | Sep 25 | Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for… Affected: 4.0.0 and later |
| CVE-2024-31143 | 7.5 | Jul 18 | An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors Affected: 4.4.0 and later |
| CVE-2024-31142 | 7.5 | May 16 | Because of a logical error in XSA-407 (Branch Type Confusion), the mitigation is not applied properly when it is intended to be used Affected: before 4.15.6; 4.16.0 before 4.16.6; 4.17.0 before 4.17.4; 4.18.0 before 4.18.2 |
| CVE-2022-42330 | 7.5 | Jan 26 | Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g Affected: 4.17.0 |
| CVE-2019-19583 | 7.5 | Dec 11 | An issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH guest OS users to cause a denial of service (guest OS crash) because VMX VMEntry checks mishandle a certain case Affected: 4.8.0 through 4.12.1 |
| CVE-2019-18421 | 7.5 | Oct 31 | An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion… Affected: through 4.12.1 |
| CVE-2017-10922 | 7.5 | Jul 5 | The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service (loss of grant trackability), aka… Affected: through 4.8.1 |
| CVE-2017-10916 | 7.5 | Jul 5 | The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it… Affected: 4.5.0; 4.5.1; 4.5.2; 4.5.3; 4.5.5; 4.6.0; +7 more |
| CVE-2016-9380 | 7.5 | Jan 23 | The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the… Affected: All versions, or not specified |
| CVE-2015-8554 | 7.5 | Apr 14 | Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain… Affected: through 4.6.1 |
| CVE-2024-45817 | 7.3 | Sep 25 | In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register Affected: 4.5.0 and later |
| CVE-2019-19577 | 7.2 | Dec 11 | An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-structure access… Affected: through 4.12.1 |
| CVE-2026-23555 | 7.1 | Mar 23 | Xenstored DoS by unprivileged domain Affected: 4.18.0 and later |
| CVE-2022-42327 | 7.1 | Nov 1 | x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by… Affected: 4.16 |
| CVE-2022-33742 | 7.1 | Jul 5 | Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block… Affected: All versions, or not specified |
| CVE-2022-33741 | 7.1 | Jul 5 | Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block… Affected: All versions, or not specified |
| CVE-2022-33740 | 7.1 | Jul 5 | Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block… Affected: All versions, or not specified |
| CVE-2022-26365 | 7.1 | Jul 5 | Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block… Affected: All versions, or not specified |
| CVE-2021-28692 | 7.1 | Jun 30 | inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPU(s) issuing such commands Affected: 3.2.0 and later |
| CVE-2022-42320 | 7.0 | Nov 1 | Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid Affected: All versions, or not specified |
| CVE-2022-26357 | 7.0 | Apr 5 | race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide Affected: 4.11.0 before 4.12.0; 4.13.0 before 4.16.0 |
| CVE-2022-23042 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2022-23041 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2022-23040 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2022-23039 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2022-23038 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2022-23037 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2022-23036 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2021-28703 | 7.0 | Dec 7 | grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain Xen-owned pages of memory Affected: before 14.4 |
| CVE-2020-27672 | 7.0 | Oct 22 | An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting… Affected: 3.2.0 through 4.14.0 |
| CVE-2020-25599 | 7.0 | Sep 23 | An issue was discovered in Xen through 4.14.x Affected: 4.5.0 through 4.14.0 |
| CVE-2019-17342 | 7.0 | Oct 8 | An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a race condition that arose when… Affected: through 4.11.2 |