XEN vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-79610 XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations.High 8.8 · Oct 13, 2026
• CVE-2026-79609 XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254).High 8.8 · Oct 13, 2026
• CVE-2026-79608 The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR.Critical 9.8 · Oct 13, 2026
• CVE-2026-102702 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) adHigh 7.5 · Oct 13, 2026
• CVE-2026-102699 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) adHigh 7.5 · Oct 13, 2026
• CVE-2026-79602 A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen.High 8.8 · Sep 8, 2026
• CVE-2026-62433 Parts of the DM_OP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done.High 7.3 · Jul 28, 2026
• CVE-2026-62432 The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock.High 7.3 · Jul 28, 2026
• CVE-2026-62431 The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that can be set to zero to cause a #DE fault.High 7.5 · Jul 28, 2026
• CVE-2026-62430 Accesses to the CMOS memory contents are done using an indirect IO port pair.High 7.5 · Jul 28, 2026
• CVE-2026-62428 When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy).High 7.8 · Jul 28, 2026
• CVE-2026-62427 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage the system, sysctl aHigh 8.8 · Jul 28, 2026
• CVE-2026-62426 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage the system, sysctl aHigh 8.8 · Jul 28, 2026
• CVE-2026-42493 Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costlyHigh 7.5 · Jul 28, 2026
• CVE-2026-42492 Xenstore, to have an up-to-date picture of the entire system, wants to know of domains appearing and disappearing.High 7.5 · Jul 28, 2026
• CVE-2026-42486 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different usCritical 9.4 · Jul 9, 2026
• CVE-2026-23562 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different usCritical 9.4 · Jul 9, 2026
• CVE-2026-23561 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different usCritical 9.4 · Jul 9, 2026
• CVE-2026-23560 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different usCritical 9.4 · Jul 9, 2026
• CVE-2026-23559 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different Critical 9.4 · Jul 9, 2026
• CVE-2026-23556 When oxenstored is tearing a domain down, the node data is cleaned up but the usage counts are leaked.Critical 9.4 · Jul 9, 2026
• CVE-2025-58151 varstored is a component of the Xapi toolstack handling UEFI Variables for a VM.Critical 9.4 · Jul 9, 2026
• CVE-2025-58146 There are multiple issues.Critical 9.4 · Jul 9, 2026
• CVE-2025-27464 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose vCritical 9.4 · Jul 9, 2026
• CVE-2025-27463 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose vCritical 9.4 · Jul 9, 2026