Known vulnerabilities in Xen - page 2

Software: Xen
Software CPE: cpe:2.3:a:xen_project:xen:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 447
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Xen Xen is affected by 447 known vulnerabilities: 1 critical, 16 high, 162 medium, 268 low Critical High Medium Low

Vulnerabilities (447)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140027 - Improper input validation
CVE-2026-42494
CWE-20 Medium
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140028 - Integer underflow
CVE-2026-42495
CWE-191 Medium
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140029 - Improper input validation
CVE-2026-62423
CWE-20 Medium
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140030 - Improper input validation
CVE-2026-62424
CWE-20 Medium
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU140026 - Improper Locking
CVE-2026-62427
CWE-667 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 7 more
#VU137514 - Improper Certificate Validation
CVE-2026-42491
CWE-295 Medium
No
No
- 14.07.2026 SB2026071486
SB2026080209
#VU134010 - Improper control of a resource through its lifetime
CVE-2026-42488
CWE-664 Low
No
No
- 09.06.2026 SB2026060946
SB20260610106
SB20260610107
and 6 more
#VU134009 - Improper Access Control
CVE-2025-10263
CWE-284 Low
No
No
- 09.06.2026 SB2026060946
SB2026061108
SB2026061109
and 36 more
#VU134007 - Improper Locking
CVE-2026-42489
CWE-667 Low
No
No
- 09.06.2026 SB2026060946
SB20260610106
SB20260610107
and 6 more
#VU134008 - Improper Access Control
CVE-2026-42490
CWE-284 Low
No
No
- 09.06.2026 SB2026060946
SB20260610106
SB20260610107
and 6 more
#VU134006 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-42487
CWE-362 Low
No
No
- 09.06.2026 SB2026060946
SB20260610106
SB20260610107
and 6 more
#VU131218 - Improper Privilege Management
CVE-2025-54518
CWE-269 Low
No
No
- 12.05.2026 SB20260512104
SB2026051316
SB2026051320
and 88 more
#VU128379 - Missing Release of Resource after Effective Lifetime
CVE-2026-23556
CWE-772 Low
No
No
- 28.04.2026 SB20260428207
SB2026042901
SB20260429105
and 3 more
#VU128378 - Reachable Assertion
CVE-2026-23557
CWE-617 Medium
No
No
- 28.04.2026 SB20260428207
SB20260428235
SB2026042901
and 9 more
#VU128377 - Out-of-bounds read
CVE-2026-31786
CWE-125 Low
No
No
- 28.04.2026 SB20260428207
SB20260513116
SB2026051411
and 5 more
#VU128376 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23558
CWE-362 Medium
No
No
- 28.04.2026 SB20260428207
SB20260428235
SB2026042901
and 10 more
#VU128375 - Double Free
CVE-2026-31787
CWE-415 Low
No
No
- 28.04.2026 SB20260428207
SB20260513116
SB2026051411
and 18 more
#VU126565 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 20.04.2026 SB2026042079
#VU124445 - Improper Privilege Management
CVE-2026-31788
CWE-269 Low
No
No
- 25.03.2026 SB2026032551
SB2026032587
SB2026041129
and 33 more
#VU124114 - Reachable Assertion
CVE-2026-23555
CWE-617 Low
No
No
- 18.03.2026 SB2026031846
SB2026031847
SB2026031848
and 5 more


Showing elements 21 - 40 out of 447