XE
Product
Xen
490
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 16High 134Medium 162Low 11
Watch
Add Xen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-33747 | 3.8 | Oct 11 | Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g Affected: All versions, or not specified |
| CVE-2017-7995 | 3.8 | May 3 | Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure Affected: through 4.2.5 |
| CVE-2016-3159 | 3.8 | Apr 13 | The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS… Affected: 4.3.0 through 4.3.4; 4.4.0 through 4.4.4; 4.5.0 through 4.5.3; 4.6.0 through 4.6.1 |
| CVE-2016-3158 | 3.8 | Apr 13 | The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users… Affected: through 4.4.0 |
| CVE-2015-6815 | 3.5 | Jan 31 | The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to… Affected: 4.4.3; 4.5.1 |
| CVE-2023-46837 | 3.3 | Jan 5 | Arm provides multiple helpers to clean & invalidate the cache for a given region Affected: through 4.16 |
| CVE-2023-34321 | 3.3 | Jan 5 | Arm provides multiple helpers to clean & invalidate the cache for a given region Affected: through 4.16 |
| CVE-2022-42336 | 3.3 | May 17 | Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is… Affected: 4.17 |
| CVE-2016-9932 | 3.3 | Jan 26 | CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored"… Affected: 3.3.0; 3.3.1; 3.3.2; 3.4.0; 3.4.1; 3.4.2; +34 more |
| CVE-2026-23553 | 2.9 | Jan 28 | In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run Affected: 4.6.0 and later |
| CVE-2020-29480 | 2.3 | Dec 15 | An issue was discovered in Xen through 4.14.x Affected: through 4.14.0 |
Showing 11