Known vulnerabilities in Xen

Software: Xen
Software CPE: cpe:2.3:a:xen_project:xen:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 441
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Xen Xen is affected by 441 known vulnerabilities: 1 critical, 16 high, 160 medium, 264 low Critical High Medium Low

Vulnerabilities (441)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140027 - Improper input validation
CVE-2026-42494
CWE-20 Medium
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140028 - Integer underflow
CVE-2026-42495
CWE-191 Medium
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140029 - Improper input validation
CVE-2026-62423
CWE-20 Medium
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140030 - Improper input validation
CVE-2026-62424
CWE-20 Medium
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140031 - Improper input validation
CVE-2026-62425
CWE-20 Medium
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140025 - Improper Locking
CVE-2026-62426
CWE-667 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140026 - Improper Locking
CVE-2026-62427
CWE-667 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140023 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-62435
CWE-362 Low
No
No
- 29.07.2026 SB2026072966
SB2026073102
SB2026073108
and 3 more
#VU140024 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-62436
CWE-362 Low
No
No
- 29.07.2026 SB2026072966
SB2026073102
SB2026073108
and 3 more
#VU140022 - Out-of-bounds read
CVE-2026-62430
CWE-125 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140021 - Improper input validation
CVE-2026-62433
CWE-20 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140020 - Resource exhaustion
CVE-2026-42493
CWE-400 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140019 - Improper Initialization
CVE-2026-42492
CWE-665 Low
No
No
- 29.07.2026 SB2026072966
SB2026073102
SB2026073108
and 2 more
#VU140018 - Type confusion
CVE-2026-62428
CWE-843 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140017 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-62429
CWE-362 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140016 - Divide By Zero
CVE-2026-62431
CWE-369 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 6 more
#VU140015 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-62432
CWE-362 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140014 - Out-of-bounds write
CVE-2026-62434
CWE-787 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140013 - Improper Privilege Management
CWE-269 Medium
No
No
- 29.07.2026 SB2026072966
#VU137514 - Improper Certificate Validation
CVE-2026-42491
CWE-295 Medium
No
No
- 14.07.2026 SB2026071486
SB2026080209


Showing elements 1 - 20 out of 441