XE
Product
Xen
491
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 16High 134Medium 163Low 11
Watch
Add Xen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-33747 | 3.8 | Oct 11 | Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g Affected: All versions, or not specified |
| CVE-2017-7995 | 3.8 | May 3 | Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure Affected: through 4.2.5 |
| CVE-2016-3159 | 3.8 | Apr 13 | The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS… Affected: 4.3.0 through 4.3.4; 4.4.0 through 4.4.4; 4.5.0 through 4.5.3; 4.6.0 through 4.6.1 |
| CVE-2016-3158 | 3.8 | Apr 13 | The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users… Affected: through 4.4.0 |
| CVE-2015-6815 | 3.5 | Jan 31 | The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to… Affected: 4.4.3; 4.5.1 |
| CVE-2023-46837 | 3.3 | Jan 5 | arm32: The cache may not be properly cleaned/invalidated (take two) Affected: through 4.16 |
| CVE-2023-34321 | 3.3 | Jan 5 | arm32: The cache may not be properly cleaned/invalidated Affected: through 4.16 |
| CVE-2022-42336 | 3.3 | May 17 | Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is… Affected: 4.17 |
| CVE-2016-9932 | 3.3 | Jan 26 | CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored"… Affected: 3.3.0; 3.3.1; 3.3.2; 3.4.0; 3.4.1; 3.4.2; +34 more |
| CVE-2026-23553 | 2.9 | Jan 28 | x86: incomplete IBPB for vCPU isolation Affected: 4.6.0 and later |
| CVE-2020-29480 | 2.3 | Dec 15 | An issue was discovered in Xen through 4.14.x Affected: through 4.14.0 |
Showing 11