Known vulnerabilities in Xen

Software: Xen
Software CPE: cpe:2.3:a:xen_project:xen:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 447
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Xen Xen is affected by 447 known vulnerabilities: 1 critical, 16 high, 162 medium, 268 low Critical High Medium Low

Vulnerabilities (447)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147399 - Missing release of memory after effective lifetime
CVE-2026-62437
CWE-401 Low
No
No
- 08.09.2026 SB2026090845
SB2026090870
SB2026090871
and 3 more
#VU147398 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-79602
CWE-754 Low
No
No
- 08.09.2026 SB2026090845
SB2026090870
SB2026090871
and 3 more
#VU147397 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-79603
CWE-362 Low
No
No
- 08.09.2026 SB2026090845
SB2026090870
SB2026090871
and 2 more
#VU147396 - Resource exhaustion
CVE-2026-79604
CWE-400 Low
No
No
- 08.09.2026 SB2026090845
SB2026091802
#VU147394 - Memory corruption
CVE-2026-79605
CWE-119 Medium
No
No
- 08.09.2026 SB2026090845
#VU147395 - Out-of-bounds write
CVE-2026-79606
CWE-787 Medium
No
No
- 08.09.2026 SB2026090845
#VU140031 - Improper input validation
CVE-2026-62425
CWE-20 Medium
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140025 - Improper Locking
CVE-2026-62426
CWE-667 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140023 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-62435
CWE-362 Low
No
No
- 29.07.2026 SB2026072966
SB2026073102
SB2026073108
and 3 more
#VU140024 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-62436
CWE-362 Low
No
No
- 29.07.2026 SB2026072966
SB2026073102
SB2026073108
and 3 more
#VU140022 - Out-of-bounds read
CVE-2026-62430
CWE-125 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140021 - Improper input validation
CVE-2026-62433
CWE-20 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140020 - Resource exhaustion
CVE-2026-42493
CWE-400 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140019 - Improper Initialization
CVE-2026-42492
CWE-665 Low
No
No
- 29.07.2026 SB2026072966
SB2026073102
SB2026073108
and 2 more
#VU140018 - Type confusion
CVE-2026-62428
CWE-843 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 8 more
#VU140017 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-62429
CWE-362 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140016 - Divide By Zero
CVE-2026-62431
CWE-369 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140015 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-62432
CWE-362 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 8 more
#VU140014 - Out-of-bounds write
CVE-2026-62434
CWE-787 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 8 more
#VU140013 - Improper Privilege Management
CWE-269 Medium
No
No
- 29.07.2026 SB2026072966


Showing elements 1 - 20 out of 447