Known vulnerabilities in xen (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:xen_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 164
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xen (Debian package) xen (Debian package) is affected by 164 known vulnerabilities: 5 high, 62 medium, 97 low Critical High Medium Low

Vulnerabilities (164)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138955 - Improper Locking
CVE-2025-10263
CWE-667 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 21.07.2026 SB20260721142
SB20260721148
SB2026072510
and 16 more
#VU138917 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-10263
CWE-362 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 21.07.2026 SB2026072194
SB20260721148
SB2026072510
and 16 more
#VU138900 - Improper Locking
CVE-2025-10263
CWE-667 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 21.07.2026 SB2026072176
SB20260721148
SB2026072510
and 16 more
#VU138387 - Improper Locking
CVE-2025-10263
CWE-667 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 18.07.2026 SB2026071801
SB20260721148
SB2026072510
and 16 more
#VU138177 - Improper Locking
CVE-2025-10263
CWE-667 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 17.07.2026 SB2026071712
SB20260721148
SB2026072510
and 16 more
#VU137533 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-10263
CWE-362 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 14.07.2026 SB20260714108
SB20260721148
SB2026072510
and 16 more
#VU137404 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-10263
CWE-362 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 14.07.2026 SB2026071413
SB20260721148
SB2026072510
and 16 more
#VU137322 - Improper Locking
CVE-2025-10263
CWE-667 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 11.07.2026 SB2026071103
SB2026071406
SB20260721148
and 17 more
#VU136964 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-10263
CWE-362 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 07.07.2026 SB2026070738
SB2026070778
SB2026070779
and 20 more
#VU136690 - Improper Locking
CVE-2025-10263
CWE-667 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 02.07.2026 SB2026070231
SB2026070287
SB2026070325
and 25 more
#VU134010 - Improper control of a resource through its lifetime
CVE-2026-42488
CWE-664 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 09.06.2026 SB2026060946
SB20260610106
SB20260610107
and 6 more
#VU134009 - Improper Access Control
CVE-2025-10263
CWE-284 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 09.06.2026 SB2026060946
SB2026061108
SB2026061109
and 36 more
#VU134006 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-42487
CWE-362 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 09.06.2026 SB2026060946
SB20260610106
SB20260610107
and 6 more
#VU131218 - Improper Privilege Management
CVE-2025-54518
CWE-269 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 12.05.2026 SB20260512104
SB2026051316
SB2026051320
and 88 more
#VU128379 - Missing Release of Resource after Effective Lifetime
CVE-2026-23556
CWE-772 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 28.04.2026 SB20260428207
SB2026042901
SB20260429105
and 3 more
#VU128378 - Reachable Assertion
CVE-2026-23557
CWE-617 Medium
No
No
4.20.3+127-gc42374a105-0+deb13u1 28.04.2026 SB20260428207
SB20260428235
SB2026042901
and 9 more
#VU128376 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23558
CWE-362 Medium
No
No
4.20.3+127-gc42374a105-0+deb13u1 28.04.2026 SB20260428207
SB20260428235
SB2026042901
and 10 more
#VU126567 - Observable discrepancy
CVE-2025-54505
CWE-203 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 20.04.2026 SB2026042081
SB20260428235
SB2026042901
and 39 more
#VU124114 - Reachable Assertion
CVE-2026-23555
CWE-617 Low
No
No
4.20.3+127-gc42374a105-0+deb13u1 18.03.2026 SB2026031846
SB2026031847
SB2026031848
and 5 more
#VU124113 - Use After Free
CVE-2026-23554
CWE-416 Medium
No
No
4.20.3+127-gc42374a105-0+deb13u1 18.03.2026 SB2026031846
SB2026031847
SB2026031848
and 7 more


Showing elements 1 - 20 out of 164