XE
Product
Xen
490
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 16High 134Medium 162Low 11
Watch
Add Xen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-10921 | 10.0 | Jul 5 | The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a… Affected: through 4.8.1 |
| CVE-2017-10920 | 10.0 | Jul 5 | The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS… Affected: through 4.8.1 |
| CVE-2017-10918 | 10.0 | Jul 5 | Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222 Affected: through 4.8.1 |
| CVE-2017-10912 | 10.0 | Jul 5 | Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217 Affected: through 4.8.1 |
| CVE-2015-8104 | 10.0 | Nov 16 | The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB… Affected: 4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; 4.4.0; +11 more |
| CVE-2017-2620 | 9.9 | Jul 27 | Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue Affected: through 4.7.1; 4.7.1; 4.7.1; 4.7.1; 4.7.1; 4.7.1; +2 more |
| CVE-2018-12892 | 9.9 | Jul 2 | An issue was discovered in Xen 4.7 through 4.10.x Affected: 4.7.0 through 4.10.1 |
| CVE-2025-58143 | 9.8 | Sep 11 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling… Affected: 4.13.0 before 4.17.0 |
| CVE-2025-58142 | 9.8 | Sep 11 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling… Affected: 4.13.0 before 4.17.0 |
| CVE-2025-27466 | 9.8 | Sep 11 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling… Affected: 4.13.0 before 4.17.0 |
| CVE-2019-18425 | 9.8 | Oct 31 | An issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS privileges by installing and using descriptors Affected: through 4.12.1 |
| CVE-2017-10913 | 9.8 | Jul 5 | The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive… Affected: through 4.8.1 |
| CVE-2017-2615 | 9.1 | Jul 3 | Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue Affected: through 4.7.1; 4.7.1; 4.7.1; 4.7.1; 4.7.1 |
| CVE-2017-15597 | 9.1 | Oct 30 | An issue was discovered in Xen through 4.9.x Affected: through 4.9.0 |
| CVE-2017-10917 | 9.1 | Jul 5 | Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS… Affected: through 4.8.1 |
| CVE-2017-10915 | 9.0 | Jul 5 | The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka… Affected: through 4.8.1 |
Showing 16