# cve.now: XEN

The newest entries naming XEN as an affected vendor (up to 200), of 153 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-102704](https://cve.now/CVE-2026-102704.md): arbitrary read/write via grant copy (CVSS 4.4)
- [CVE-2026-102703](https://cve.now/CVE-2026-102703.md): arbitrary read/write via grant copy (CVSS 4.4)
- [CVE-2026-102700](https://cve.now/CVE-2026-102700.md): gnttab: cache-flush handling may cause page reference leak (CVSS 4.7)
- [CVE-2026-102702](https://cve.now/CVE-2026-102702.md): Arm: multiple issues with GNTTABOP\_cache\_flush (CVSS 7.5)
- [CVE-2026-102699](https://cve.now/CVE-2026-102699.md): Arm: multiple issues with GNTTABOP\_cache\_flush (CVSS 7.5)
- [CVE-2026-79611](https://cve.now/CVE-2026-79611.md): VMX: VMentry failure with branch tracing and blocked states (CVSS 5.5)
- [CVE-2026-79610](https://cve.now/CVE-2026-79610.md): grant-table: double version change race (CVSS 8.8)
- [CVE-2026-79609](https://cve.now/CVE-2026-79609.md): x86: XPTI may break on huge-memory systems (CVSS 8.8)
- [CVE-2026-79608](https://cve.now/CVE-2026-79608.md): x86/AMD: ineffectual Zenbleed workaround (CVSS 9.8)
- [CVE-2026-79607](https://cve.now/CVE-2026-79607.md): Xenstore: Guests can crash xenstored during Live Update (CVSS 5.5)
- [CVE-2026-79603](https://cve.now/CVE-2026-79603.md): Unconditionally do TLB flushing ahead of page scrubbing (CVSS 4.3)
- [CVE-2026-79602](https://cve.now/CVE-2026-79602.md): x86: improper handling of HVM emulation return codes (CVSS 8.8)
- [CVE-2026-62437](https://cve.now/CVE-2026-62437.md): x86: DMs may cause mem leak by IRQ binding (CVSS 6.5)
- [CVE-2026-62434](https://cve.now/CVE-2026-62434.md): PoD: Don't try to reclaim special pages (CVSS 5.3)
- [CVE-2026-62433](https://cve.now/CVE-2026-62433.md): correct buffer checks for DM\_OP hypercalls (CVSS 7.3)
- [CVE-2026-62432](https://cve.now/CVE-2026-62432.md): evtchn: Race between FIFO expand and reset (CVSS 7.3)
- [CVE-2026-62431](https://cve.now/CVE-2026-62431.md): Viridian STIMER division by zero (CVSS 7.5)
- [CVE-2026-62430](https://cve.now/CVE-2026-62430.md): x86: Out-of-bounds read in vRTC emulation (CVSS 7.5)
- [CVE-2026-62429](https://cve.now/CVE-2026-62429.md): vNUMA domain cleanup may race other operations (CVSS 6.5)
- [CVE-2026-62436](https://cve.now/CVE-2026-62436.md): grant-table: version change racing with other operations (CVSS 6.5)
- [CVE-2026-62435](https://cve.now/CVE-2026-62435.md): grant-table: version change racing with other operations (CVSS 6.5)
- [CVE-2026-62428](https://cve.now/CVE-2026-62428.md): grant-table: type confusion in grant-copy (CVSS 7.8)
- [CVE-2026-62427](https://cve.now/CVE-2026-62427.md): sysctl and platform-op locks open to abuse (CVSS 8.8)
- [CVE-2026-62426](https://cve.now/CVE-2026-62426.md): sysctl and platform-op locks open to abuse (CVSS 8.8)
- [CVE-2026-62425](https://cve.now/CVE-2026-62425.md): buffer overruns in libfsimage iso9660 handling (CVSS 5.5)
- [CVE-2026-62424](https://cve.now/CVE-2026-62424.md): buffer overruns in libfsimage iso9660 handling (CVSS 5.5)
- [CVE-2026-62423](https://cve.now/CVE-2026-62423.md): buffer overruns in libfsimage iso9660 handling (CVSS 5.5)
- [CVE-2026-42495](https://cve.now/CVE-2026-42495.md): buffer overruns in libfsimage iso9660 handling (CVSS 5.5)
- [CVE-2026-42494](https://cve.now/CVE-2026-42494.md): buffer overruns in libfsimage iso9660 handling (CVSS 6.1)
- [CVE-2026-42492](https://cve.now/CVE-2026-42492.md): vIRQ event channel binding may break Xenstore (CVSS 7.5)
- [CVE-2026-42493](https://cve.now/CVE-2026-42493.md): x86 shadow paging is deprecated (CVSS 7.5)
- [CVE-2026-42486](https://cve.now/CVE-2026-42486.md): Multiple RBAC issues in XAPI (CVSS 9.4)
- [CVE-2026-23562](https://cve.now/CVE-2026-23562.md): Multiple RBAC issues in XAPI (CVSS 9.4)
- [CVE-2026-23561](https://cve.now/CVE-2026-23561.md): Multiple RBAC issues in XAPI (CVSS 9.4)
- [CVE-2026-23560](https://cve.now/CVE-2026-23560.md): Multiple RBAC issues in XAPI (CVSS 9.4)
- [CVE-2026-23559](https://cve.now/CVE-2026-23559.md): Multiple RBAC issues in XAPI (CVSS 9.4)
- [CVE-2026-23556](https://cve.now/CVE-2026-23556.md): oxenstored keeps quota related use counts across domain destruction (CVSS 9.4)
- [CVE-2025-58151](https://cve.now/CVE-2025-58151.md): varstored: TOCTOU issues with mapped guest memory (CVSS 9.4)
- [CVE-2025-58146](https://cve.now/CVE-2025-58146.md): XAPI UTF-8 string handling (CVSS 9.4)
- [CVE-2025-27464](https://cve.now/CVE-2025-27464.md): WinPVDrivers: Excessive permissions on user-exposed devices (CVSS 9.4)
- [CVE-2025-27463](https://cve.now/CVE-2025-27463.md): WinPVDrivers: Excessive permissions on user-exposed devices (CVSS 9.4)
- [CVE-2025-27462](https://cve.now/CVE-2025-27462.md): WinPVDrivers: Excessive permissions on user-exposed devices (CVSS 9.4)
- [CVE-2026-42488](https://cve.now/CVE-2026-42488.md): x86: mismatched mapcache metadata (CVSS 8.1)
- [CVE-2026-42490](https://cve.now/CVE-2026-42490.md): domctl lock open to abuse (CVSS 6.5)
- [CVE-2026-42489](https://cve.now/CVE-2026-42489.md): domctl lock open to abuse (CVSS 5.3)
- [CVE-2026-42487](https://cve.now/CVE-2026-42487.md): x86 HVM I/O port list traversal (CVSS 7.9)
- [CVE-2026-23558](https://cve.now/CVE-2026-23558.md): grant table v2 race in status page mapping (CVSS 7.8)
- [CVE-2026-23557](https://cve.now/CVE-2026-23557.md): Xenstored DoS via XS\_RESET\_WATCHES command (CVSS 6.5)
- [CVE-2026-23555](https://cve.now/CVE-2026-23555.md): Xenstored DoS by unprivileged domain (CVSS 7.1)
- [CVE-2026-23554](https://cve.now/CVE-2026-23554.md): Use after free of paging structures in EPT (CVSS 7.8)
- [CVE-2026-23553](https://cve.now/CVE-2026-23553.md): x86: incomplete IBPB for vCPU isolation (CVSS 2.9)
- [CVE-2025-58150](https://cve.now/CVE-2025-58150.md): x86: buffer overrun with shadow paging + tracing (CVSS 8.8)
- [CVE-2025-58149](https://cve.now/CVE-2025-58149.md): Incorrect removal of permissions on PCI device unplug (CVSS 7.5)
- [CVE-2025-58148](https://cve.now/CVE-2025-58148.md): x86: Incorrect input sanitisation in Viridian hypercalls (CVSS 7.5)
- [CVE-2025-58147](https://cve.now/CVE-2025-58147.md): x86: Incorrect input sanitisation in Viridian hypercalls (CVSS 7.5)
- [CVE-2025-58145](https://cve.now/CVE-2025-58145.md): Arm issues with page refcounting (CVSS 7.5)
- [CVE-2025-58144](https://cve.now/CVE-2025-58144.md): Arm issues with page refcounting (CVSS 7.5)
- [CVE-2025-58143](https://cve.now/CVE-2025-58143.md): Mutiple vulnerabilities in the Viridian interface (CVSS 9.8)
- [CVE-2025-58142](https://cve.now/CVE-2025-58142.md): Mutiple vulnerabilities in the Viridian interface (CVSS 9.8)
- [CVE-2025-27466](https://cve.now/CVE-2025-27466.md): Mutiple vulnerabilities in the Viridian interface (CVSS 9.8)
- [CVE-2025-1713](https://cve.now/CVE-2025-1713.md): deadlock potential with VT-d and legacy PCI device pass-through (CVSS 7.5)
- [CVE-2025-27465](https://cve.now/CVE-2025-27465.md): x86: Incorrect stubs exception handling for flags recovery (CVSS 4.3)
- [CVE-2024-2201](https://cve.now/CVE-2024-2201.md): CVE-2024-2201 (CVSS 4.7)
- [CVE-2024-45819](https://cve.now/CVE-2024-45819.md): libxl leaks data to PVH guests via ACPI tables (CVSS 5.5)
- [CVE-2024-45818](https://cve.now/CVE-2024-45818.md): Deadlock in x86 HVM standard VGA handling (CVSS 6.5)
- [CVE-2024-45817](https://cve.now/CVE-2024-45817.md): x86: Deadlock in vlapic\_error() (CVSS 7.3)
- [CVE-2024-31146](https://cve.now/CVE-2024-31146.md): PCI device pass-through with shared resources (CVSS 7.5)
- [CVE-2024-31145](https://cve.now/CVE-2024-31145.md): error handling in x86 IOMMU identity mapping (CVSS 7.5)
- [CVE-2024-31143](https://cve.now/CVE-2024-31143.md): double unlock in x86 guest IRQ handling (CVSS 7.5)
- [CVE-2024-31142](https://cve.now/CVE-2024-31142.md): x86: Incorrect logic for BTC/SRSO mitigations (CVSS 7.5)
- [CVE-2023-46842](https://cve.now/CVE-2023-46842.md): x86 HVM hypercalls may trigger Xen bug check (CVSS 6.5)
- [CVE-2023-46841](https://cve.now/CVE-2023-46841.md): x86: shadow stack vs exceptions from emulation stubs (CVSS 6.5)
- [CVE-2023-46840](https://cve.now/CVE-2023-46840.md): VT-d: Failure to quarantine devices in !HVM builds (CVSS 4.1)
- [CVE-2023-46839](https://cve.now/CVE-2023-46839.md): pci: phantom functions assigned to incorrect contexts (CVSS 5.3)
- [CVE-2024-2193](https://cve.now/CVE-2024-2193.md): Speculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace. (CVSS 5.7)
- [CVE-2023-46837](https://cve.now/CVE-2023-46837.md): arm32: The cache may not be properly cleaned/invalidated (take two) (CVSS 3.3)
- [CVE-2023-46836](https://cve.now/CVE-2023-46836.md): x86: BTC/SRSO fixes not fully effective (CVSS 4.7)
- [CVE-2023-46835](https://cve.now/CVE-2023-46835.md): x86/AMD: mismatch in IOMMU quarantine page table levels (CVSS 5.5)
- [CVE-2023-34328](https://cve.now/CVE-2023-34328.md): x86/AMD: Debug Mask handling (CVSS 5.5)
- [CVE-2023-34327](https://cve.now/CVE-2023-34327.md): x86/AMD: Debug Mask handling (CVSS 5.5)
- [CVE-2023-34325](https://cve.now/CVE-2023-34325.md): Multiple vulnerabilities in libfsimage disk handling (CVSS 7.8)
- [CVE-2023-34326](https://cve.now/CVE-2023-34326.md): x86/AMD: missing IOMMU TLB flushing (CVSS 7.8)
- [CVE-2023-34323](https://cve.now/CVE-2023-34323.md): xenstored: A transaction conflict can crash C Xenstored (CVSS 5.5)
- [CVE-2023-34322](https://cve.now/CVE-2023-34322.md): top-level shadow reference dropped too early for 64-bit PV guests (CVSS 7.8)
- [CVE-2023-34321](https://cve.now/CVE-2023-34321.md): arm32: The cache may not be properly cleaned/invalidated (CVSS 3.3)
- [CVE-2023-34320](https://cve.now/CVE-2023-34320.md): arm: Guests can trigger a deadlock on Cortex-A77 (no CVSS)
- [CVE-2022-42336](https://cve.now/CVE-2022-42336.md): Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires (CVSS 3.3)
- [CVE-2022-42335](https://cve.now/CVE-2022-42335.md): x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted P (no CVSS)
- [CVE-2022-42334](https://cve.now/CVE-2022-42334.md): x86/HVM pinned cache attributes mis-handling T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerab (no CVSS)
- [CVE-2022-42333](https://cve.now/CVE-2022-42333.md): x86/HVM pinned cache attributes mis-handling T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerab (no CVSS)
- [CVE-2022-42332](https://cve.now/CVE-2022-42332.md): x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Pag (no CVSS)
- [CVE-2022-42331](https://cve.now/CVE-2022-42331.md): x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one (no CVSS)
- [CVE-2022-42330](https://cve.now/CVE-2022-42330.md): Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. (no CVSS)
- [CVE-2022-42327](https://cve.now/CVE-2022-42327.md): x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and wri (CVSS 7.1)
- [CVE-2022-42326](https://cve.now/CVE-2022-42326.md): Xenstore: Guests can create arbitrary number of nodes via transactions T\[his CNA information record relates to multiple CVEs; the text expla (CVSS 5.5)
- [CVE-2022-42325](https://cve.now/CVE-2022-42325.md): Xenstore: Guests can create arbitrary number of nodes via transactions T\[his CNA information record relates to multiple CVEs; the text expla (no CVSS)
- [CVE-2022-42324](https://cve.now/CVE-2022-42324.md): Oxenstored 32-\>31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. (no CVSS)
- [CVE-2022-42323](https://cve.now/CVE-2022-42323.md): Xenstore: Cooperating guests can create arbitrary numbers of nodes T\[his CNA information record relates to multiple CVEs; the text explains (no CVSS)
- [CVE-2022-42322](https://cve.now/CVE-2022-42322.md): Xenstore: Cooperating guests can create arbitrary numbers of nodes T\[his CNA information record relates to multiple CVEs; the text explains (no CVSS)
- [CVE-2022-42321](https://cve.now/CVE-2022-42321.md): Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations (e.g. (no CVSS)
- [CVE-2022-42320](https://cve.now/CVE-2022-42320.md): Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid. (no CVSS)
- [CVE-2022-42319](https://cve.now/CVE-2022-42319.md): Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might need to allocate quit (no CVSS)
- [CVE-2022-42318](https://cve.now/CVE-2022-42318.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5)
- [CVE-2022-42317](https://cve.now/CVE-2022-42317.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5)
- [CVE-2022-42316](https://cve.now/CVE-2022-42316.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5)
- [CVE-2022-42315](https://cve.now/CVE-2022-42315.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5)
- [CVE-2022-42314](https://cve.now/CVE-2022-42314.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5)
- [CVE-2022-42313](https://cve.now/CVE-2022-42313.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5)
- [CVE-2022-42312](https://cve.now/CVE-2022-42312.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5)
- [CVE-2022-42311](https://cve.now/CVE-2022-42311.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5)
- [CVE-2022-42310](https://cve.now/CVE-2022-42310.md): Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest (no CVSS)
- [CVE-2022-42309](https://cve.now/CVE-2022-42309.md): Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during (no CVSS)
- [CVE-2022-33748](https://cve.now/CVE-2022-33748.md): lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. (no CVSS)
- [CVE-2022-33747](https://cve.now/CVE-2022-33747.md): Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. (no CVSS)
- [CVE-2022-33746](https://cve.now/CVE-2022-33746.md): P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. (no CVSS)
- [CVE-2022-33745](https://cve.now/CVE-2022-33745.md): insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV gu (no CVSS)
- [CVE-2022-33742](https://cve.now/CVE-2022-33742.md): Linux disk/nic frontends data leaks T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities c (no CVSS)
- [CVE-2022-33741](https://cve.now/CVE-2022-33741.md): Linux disk/nic frontends data leaks T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities c (no CVSS)
- [CVE-2022-33740](https://cve.now/CVE-2022-33740.md): Linux disk/nic frontends data leaks T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities c (no CVSS)
- [CVE-2022-26365](https://cve.now/CVE-2022-26365.md): Linux disk/nic frontends data leaks T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities c (no CVSS)
- [CVE-2022-26362](https://cve.now/CVE-2022-26362.md): x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. (no CVSS)
- [CVE-2022-26364](https://cve.now/CVE-2022-26364.md): x86 pv: Insufficient care with non-coherent mappings T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (no CVSS)
- [CVE-2022-26363](https://cve.now/CVE-2022-26363.md): x86 pv: Insufficient care with non-coherent mappings T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (no CVSS)
- [CVE-2022-26361](https://cve.now/CVE-2022-26361.md): IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T\[his CNA information record relates to multiple CVEs; the text explains which asp (no CVSS)
- [CVE-2022-26360](https://cve.now/CVE-2022-26360.md): IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T\[his CNA information record relates to multiple CVEs; the text explains which asp (no CVSS)
- [CVE-2022-26359](https://cve.now/CVE-2022-26359.md): IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T\[his CNA information record relates to multiple CVEs; the text explains which asp (no CVSS)
- [CVE-2022-26358](https://cve.now/CVE-2022-26358.md): IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T\[his CNA information record relates to multiple CVEs; the text explains which asp (no CVSS)
- [CVE-2022-26357](https://cve.now/CVE-2022-26357.md): race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. (no CVSS)
- [CVE-2022-26356](https://cve.now/CVE-2022-26356.md): Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN\_DMOP\_track\_dirty\_vram (no CVSS)
- [CVE-2022-23035](https://cve.now/CVE-2022-23035.md): Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involve (no CVSS)
- [CVE-2022-23034](https://cve.now/CVE-2022-23034.md): A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where (no CVSS)
- [CVE-2022-23033](https://cve.now/CVE-2022-23033.md): arm: guest\_physmap\_remove\_page not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm ( (no CVSS)
- [CVE-2021-28709](https://cve.now/CVE-2021-28709.md): issues with partially successful P2M updates on x86 T\[his CNA information record relates to multiple CVEs; the text explains which aspects/v (no CVSS)
- [CVE-2021-28708](https://cve.now/CVE-2021-28708.md): PoD operations on misaligned GFNs T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor (no CVSS)
- [CVE-2021-28707](https://cve.now/CVE-2021-28707.md): PoD operations on misaligned GFNs T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor (no CVSS)
- [CVE-2021-28706](https://cve.now/CVE-2021-28706.md): guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercal (no CVSS)
- [CVE-2021-28705](https://cve.now/CVE-2021-28705.md): issues with partially successful P2M updates on x86 T\[his CNA information record relates to multiple CVEs; the text explains which aspects/v (no CVSS)
- [CVE-2021-28704](https://cve.now/CVE-2021-28704.md): PoD operations on misaligned GFNs T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor (no CVSS)
- [CVE-2021-28710](https://cve.now/CVE-2021-28710.md): certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structures (page tables) may (no CVSS)
- [CVE-2021-28702](https://cve.now/CVE-2021-28702.md): PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Res (no CVSS)
- [CVE-2021-28701](https://cve.now/CVE-2021-28701.md): Another race in XENMAPSPACE\_grant\_table handling Guests are permitted access to certain Xen-owned pages of memory. (no CVSS)
- [CVE-2021-28696](https://cve.now/CVE-2021-28696.md): IOMMU page mapping issues on x86 T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corr (no CVSS)
- [CVE-2021-28695](https://cve.now/CVE-2021-28695.md): IOMMU page mapping issues on x86 T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corr (no CVSS)
- [CVE-2021-28694](https://cve.now/CVE-2021-28694.md): IOMMU page mapping issues on x86 T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corr (no CVSS)
- [CVE-2021-28697](https://cve.now/CVE-2021-28697.md): grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. (no CVSS)
- [CVE-2021-28698](https://cve.now/CVE-2021-28698.md): long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a doma (no CVSS)
- [CVE-2021-28699](https://cve.now/CVE-2021-28699.md): inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. (no CVSS)
- [CVE-2021-28700](https://cve.now/CVE-2021-28700.md): xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly fr (no CVSS)
- [CVE-2021-28693](https://cve.now/CVE-2021-28693.md): xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. (no CVSS)
- [CVE-2021-28692](https://cve.now/CVE-2021-28692.md): inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPU(s) iss (no CVSS)
- [CVE-2021-28690](https://cve.now/CVE-2021-28690.md): x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. (no CVSS)
- [CVE-2021-28687](https://cve.now/CVE-2021-28687.md): HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disp (no CVSS)
- [CVE-2021-28689](https://cve.now/CVE-2021-28689.md): x86: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests 32-bit x86 PV guest kernels run in ring 1. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/xen
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.