| CVE-2026-102703 |
arbitrary read/write via grant copy
|
4.4
Moyenne
|
4 nov. 2026 |
| CVE-2026-102704 |
arbitrary read/write via grant copy
|
4.4
Moyenne
|
4 nov. 2026 |
| CVE-2026-102700 |
With its original introduction, GNTTAB_cache_flush was made available
uniformly
|
4.7
Moyenne
|
13 oct. 2026 |
| CVE-2026-102702 |
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…
|
7.5
Élevée
|
13 oct. 2026 |
| CVE-2026-102699 |
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…
|
7.5
Élevée
|
13 oct. 2026 |
| CVE-2026-79611 |
For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB…
|
5.5
Moyenne
|
13 oct. 2026 |
| CVE-2026-79610 |
XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain
other grant table operations
|
8.8
Élevée
|
13 oct. 2026 |
| CVE-2026-79609 |
XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown
(CVE-2017-5754, one aspect of XSA-254)
|
8.8
Élevée
|
13 oct. 2026 |
| CVE-2026-79608 |
The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations…
|
9.8
Critique
|
13 oct. 2026 |
| CVE-2026-79607 |
During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes…
|
5.5
Moyenne
|
13 oct. 2026 |
| CVE-2026-79603 |
x86 PV guests can free memory pages while still keeping a stale TLB entry
pointing to them
|
4.3
Moyenne
|
8 sept. 2026 |
| CVE-2026-79602 |
A guest with a PCI device assigned that has at least a BAR on the IO port
space can trigger a BUG() in Xen
|
8.8
Élevée
|
8 sept. 2026 |
| CVE-2026-62437 |
When guests are terminated, various pieces of cleanup need carrying out
|
6.5
Moyenne
|
8 sept. 2026 |
| CVE-2026-62434 |
A guest started with Populated on Demand enabled (PoD) can attempt to
reclaim pages which aren't regular guest RAM
|
5.3
Moyenne
|
28 juil. 2026 |
| CVE-2026-62433 |
Parts of the DM_OP handling code assumes the caller has provided the required number of buffers for the given…
|
7.3
Élevée
|
28 juil. 2026 |
| CVE-2026-62432 |
The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but without holding the…
|
7.3
Élevée
|
28 juil. 2026 |
| CVE-2026-62431 |
The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value,…
|
7.5
Élevée
|
28 juil. 2026 |
| CVE-2026-62430 |
Accesses to the CMOS memory contents are done using an indirect IO port
pair
|
7.5
Élevée
|
28 juil. 2026 |
| CVE-2026-62429 |
Accessing the vNUMA configuration data of a guest is still possible when
domain destruction has already started
|
6.5
Moyenne
|
28 juil. 2026 |
| CVE-2026-62435 |
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…
|
6.5
Moyenne
|
28 juil. 2026 |
| CVE-2026-62436 |
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…
|
6.5
Moyenne
|
28 juil. 2026 |
| CVE-2026-62428 |
When grant-copy operations are processed, the respective grant may or may not already be in use by another operation…
|
7.8
Élevée
|
28 juil. 2026 |
| CVE-2026-62426 |
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…
|
8.8
Élevée
|
28 juil. 2026 |
| CVE-2026-62427 |
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…
|
8.8
Élevée
|
28 juil. 2026 |
| CVE-2026-42494 |
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…
|
6.1
Moyenne
|
28 juil. 2026 |