Known vulnerabilities in Xen - page 2

Software: Xen
Software CPE: cpe:2.3:a:xen_project:xen:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 441
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Xen Xen is affected by 441 known vulnerabilities: 1 critical, 16 high, 160 medium, 264 low Critical High Medium Low

Vulnerabilities (441)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134010 - Improper control of a resource through its lifetime
CVE-2026-42488
CWE-664 Low
No
No
- 09.06.2026 SB2026060946
SB20260610106
SB20260610107
and 6 more
#VU134009 - Improper Access Control
CVE-2025-10263
CWE-284 Low
No
No
- 09.06.2026 SB2026060946
SB2026061108
SB2026061109
and 31 more
#VU134007 - Improper Locking
CVE-2026-42489
CWE-667 Low
No
No
- 09.06.2026 SB2026060946
SB20260610106
SB20260610107
and 6 more
#VU134008 - Improper Access Control
CVE-2026-42490
CWE-284 Low
No
No
- 09.06.2026 SB2026060946
SB20260610106
SB20260610107
and 6 more
#VU134006 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-42487
CWE-362 Low
No
No
- 09.06.2026 SB2026060946
SB20260610106
SB20260610107
and 6 more
#VU131218 - Improper Privilege Management
CVE-2025-54518
CWE-269 Low
No
No
- 12.05.2026 SB20260512104
SB2026051316
SB2026051320
and 77 more
#VU128379 - Missing Release of Resource after Effective Lifetime
CVE-2026-23556
CWE-772 Low
No
No
- 28.04.2026 SB20260428207
SB2026042901
SB20260429105
and 3 more
#VU128378 - Reachable Assertion
CVE-2026-23557
CWE-617 Medium
No
No
- 28.04.2026 SB20260428207
SB20260428235
SB2026042901
and 9 more
#VU128377 - Out-of-bounds read
CVE-2026-31786
CWE-125 Low
No
No
- 28.04.2026 SB20260428207
SB20260513116
SB2026051411
and 5 more
#VU128376 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23558
CWE-362 Medium
No
No
- 28.04.2026 SB20260428207
SB20260428235
SB2026042901
and 10 more
#VU128375 - Double Free
CVE-2026-31787
CWE-415 Low
No
No
- 28.04.2026 SB20260428207
SB20260513116
SB2026051411
and 18 more
#VU126565 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 20.04.2026 SB2026042079
#VU124445 - Improper Privilege Management
CVE-2026-31788
CWE-269 Low
No
No
- 25.03.2026 SB2026032551
SB2026032587
SB2026041129
and 31 more
#VU124114 - Reachable Assertion
CVE-2026-23555
CWE-617 Low
No
No
- 18.03.2026 SB2026031846
SB2026031847
SB2026031848
and 4 more
#VU124113 - Use After Free
CVE-2026-23554
CWE-416 Medium
No
No
- 18.03.2026 SB2026031846
SB2026031847
SB2026031848
and 7 more
#VU122072 - Permissions, Privileges, and Access Controls
CVE-2026-23553
CWE-264 Low
No
No
- 27.01.2026 SB2026012780
SB2026012786
SB2026012838
and 8 more
#VU122071 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-58151
CWE-367 Low
No
No
- 27.01.2026 SB2026012780
SB2026012786
#VU122070 - Out-of-bounds read
CVE-2025-58150
CWE-125 Low
No
No
- 27.01.2026 SB2026012780
SB2026012838
SB2026012839
and 7 more
#VU117653 - Permissions, Privileges, and Access Controls
CVE-2025-58149
CWE-264 Low
No
No
- 24.10.2025 SB2025102474
SB20251024128
SB2025102501
and 8 more
#VU117432 - Out-of-bounds write
CVE-2025-58147
CWE-787 Medium
No
No
- 21.10.2025 SB2025102166
SB2025102167
SB2025102242
and 11 more


Showing elements 21 - 40 out of 441