Known vulnerabilities in xen

Software: xen
Software CPE: cpe:2.3:o:fedoraproject:xen:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 347
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xen xen is affected by 347 known vulnerabilities: 1 critical, 12 high, 121 medium, 213 low Critical High Medium Low

Vulnerabilities (347)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140027 - Improper input validation
CVE-2026-42494
CWE-20 Medium
No
No
4.20.4-1.fc43, 4.21.2-1.fc44 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140028 - Integer underflow
CVE-2026-42495
CWE-191 Medium
No
No
4.20.4-1.fc43, 4.21.2-1.fc44 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140029 - Improper input validation
CVE-2026-62423
CWE-20 Medium
No
No
4.20.4-1.fc43, 4.21.2-1.fc44 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140030 - Improper input validation
CVE-2026-62424
CWE-20 Medium
No
No
4.20.4-1.fc43, 4.21.2-1.fc44 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140031 - Improper input validation
CVE-2026-62425
CWE-20 Medium
No
No
4.20.4-1.fc43, 4.21.2-1.fc44 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140025 - Improper Locking
CVE-2026-62426
CWE-667 Low
No
No
4.20.4-1.fc43, 4.21.2-1.fc44 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140026 - Improper Locking
CVE-2026-62427
CWE-667 Low
No
No
4.20.4-1.fc43, 4.21.2-1.fc44 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140020 - Resource exhaustion
CVE-2026-42493
CWE-400 Low
No
No
4.20.4-1.fc43, 4.21.2-1.fc44 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140019 - Improper Initialization
CVE-2026-42492
CWE-665 Low
No
No
4.20.4-1.fc43, 4.21.2-1.fc44 29.07.2026 SB2026072966
SB2026073102
SB2026073108
and 2 more
#VU140018 - Type confusion
CVE-2026-62428
CWE-843 Low
No
No
4.20.4-1.fc43, 4.21.2-1.fc44 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU138955 - Improper Locking
CVE-2025-10263
CWE-667 Low
No
No
4.20.4-1.fc43 21.07.2026 SB20260721142
SB20260721148
SB2026072510
and 13 more
#VU138917 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-10263
CWE-362 Low
No
No
4.20.4-1.fc43 21.07.2026 SB2026072194
SB20260721148
SB2026072510
and 13 more
#VU138900 - Improper Locking
CVE-2025-10263
CWE-667 Low
No
No
4.20.4-1.fc43 21.07.2026 SB2026072176
SB20260721148
SB2026072510
and 13 more
#VU138387 - Improper Locking
CVE-2025-10263
CWE-667 Low
No
No
4.20.4-1.fc43 18.07.2026 SB2026071801
SB20260721148
SB2026072510
and 13 more
#VU138177 - Improper Locking
CVE-2025-10263
CWE-667 Low
No
No
4.20.4-1.fc43 17.07.2026 SB2026071712
SB20260721148
SB2026072510
and 13 more
#VU137533 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-10263
CWE-362 Low
No
No
4.20.4-1.fc43 14.07.2026 SB20260714108
SB20260721148
SB2026072510
and 13 more
#VU137404 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-10263
CWE-362 Low
No
No
4.20.4-1.fc43 14.07.2026 SB2026071413
SB20260721148
SB2026072510
and 13 more
#VU137322 - Improper Locking
CVE-2025-10263
CWE-667 Low
No
No
4.20.4-1.fc43 11.07.2026 SB2026071103
SB2026071406
SB20260721148
and 14 more
#VU136964 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-10263
CWE-362 Low
No
No
4.20.4-1.fc43 07.07.2026 SB2026070738
SB2026070778
SB2026070779
and 17 more
#VU136690 - Improper Locking
CVE-2025-10263
CWE-667 Low
No
No
4.20.4-1.fc43 02.07.2026 SB2026070231
SB2026070287
SB2026070325
and 22 more


Showing elements 1 - 20 out of 347