XE
Product
Xen
490
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 16High 134Medium 162Low 11
Watch
Add Xen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-1713 | 7.5 | Jul 17 | When setting up interrupt remapping for legacy PCI(-X) devices, including PCI(-X) bridges, a lookup of the upstream bridge is required Affected: 4.0.0 and later |
| CVE-2024-31146 | 7.5 | Sep 25 | When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective guests individually cannot really be… Affected: All versions, or not specified |
| CVE-2024-31145 | 7.5 | Sep 25 | Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for… Affected: 4.0.0 and later |
| CVE-2024-31143 | 7.5 | Jul 18 | An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors Affected: 4.4.0 and later |
| CVE-2024-31142 | 7.5 | May 16 | Because of a logical error in XSA-407 (Branch Type Confusion), the mitigation is not applied properly when it is intended to be used Affected: before 4.15.6; 4.16.0 before 4.16.6; 4.17.0 before 4.17.4; 4.18.0 before 4.18.2 |
| CVE-2022-42330 | 7.5 | Jan 26 | Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g Affected: 4.17.0 |
| CVE-2019-19583 | 7.5 | Dec 11 | An issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH guest OS users to cause a denial of service (guest OS crash) because VMX VMEntry checks mishandle a certain case Affected: 4.8.0 through 4.12.1 |
| CVE-2019-18421 | 7.5 | Oct 31 | An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion… Affected: through 4.12.1 |
| CVE-2017-10922 | 7.5 | Jul 5 | The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service (loss of grant trackability), aka… Affected: through 4.8.1 |
| CVE-2017-10916 | 7.5 | Jul 5 | The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it… Affected: 4.5.0; 4.5.1; 4.5.2; 4.5.3; 4.5.5; 4.6.0; +7 more |
| CVE-2016-9380 | 7.5 | Jan 23 | The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the… Affected: All versions, or not specified |
| CVE-2015-8554 | 7.5 | Apr 14 | Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain… Affected: through 4.6.1 |
| CVE-2024-45817 | 7.3 | Sep 25 | In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register Affected: 4.5.0 and later |
| CVE-2019-19577 | 7.2 | Dec 11 | An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-structure access… Affected: through 4.12.1 |
| CVE-2026-23555 | 7.1 | Mar 23 | Xenstored DoS by unprivileged domain Affected: 4.18.0 and later |
| CVE-2022-42327 | 7.1 | Nov 1 | x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by… Affected: 4.16 |
| CVE-2022-33742 | 7.1 | Jul 5 | Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block… Affected: All versions, or not specified |
| CVE-2022-33741 | 7.1 | Jul 5 | Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block… Affected: All versions, or not specified |
| CVE-2022-33740 | 7.1 | Jul 5 | Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block… Affected: All versions, or not specified |
| CVE-2022-26365 | 7.1 | Jul 5 | Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block… Affected: All versions, or not specified |
| CVE-2021-28692 | 7.1 | Jun 30 | inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPU(s) issuing such commands Affected: 3.2.0 and later |
| CVE-2022-42320 | 7.0 | Nov 1 | Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid Affected: All versions, or not specified |
| CVE-2022-26357 | 7.0 | Apr 5 | race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide Affected: 4.11.0 before 4.12.0; 4.13.0 before 4.16.0 |
| CVE-2022-23042 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2022-23041 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2022-23040 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2022-23039 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2022-23038 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2022-23037 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2022-23036 | 7.0 | Mar 10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to… Affected: All versions, or not specified |
| CVE-2021-28703 | 7.0 | Dec 7 | grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain Xen-owned pages of memory Affected: before 14.4 |
| CVE-2020-27672 | 7.0 | Oct 22 | An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting… Affected: 3.2.0 through 4.14.0 |
| CVE-2020-25599 | 7.0 | Sep 23 | An issue was discovered in Xen through 4.14.x Affected: 4.5.0 through 4.14.0 |
| CVE-2019-17342 | 7.0 | Oct 8 | An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a race condition that arose when… Affected: through 4.11.2 |