Known vulnerabilities in Xen - page 3

Software: Xen
Software CPE: cpe:2.3:a:xen_project:xen:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 441
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Xen Xen is affected by 441 known vulnerabilities: 1 critical, 16 high, 160 medium, 264 low Critical High Medium Low

Vulnerabilities (441)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117433 - Out-of-bounds read
CVE-2025-58148
CWE-125 Medium
No
No
- 21.10.2025 SB2025102166
SB2025102167
SB2025102242
and 11 more
#VU115009 - Improper input validation
CVE-2025-58146
CWE-20 Medium
No
No
- 09.09.2025 SB2025090954
SB2025090955
#VU115008 - Permissions, Privileges, and Access Controls
CVE-2025-58145
CWE-264 Medium
No
No
- 09.09.2025 SB2025090953
SB2025091618
SB2025091619
and 3 more
#VU115007 - NULL Pointer Dereference
CVE-2025-58144
CWE-476 Medium
No
No
- 09.09.2025 SB2025090953
SB2025091618
SB2025091619
and 3 more
#VU115006 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-58143
CWE-362 Medium
No
No
- 09.09.2025 SB2025090952
SB2025090955
SB2025091143
and 10 more
#VU115005 - NULL Pointer Dereference
CVE-2025-58142
CWE-476 Medium
No
No
- 09.09.2025 SB2025090952
SB2025090955
SB2025091143
and 10 more
#VU115004 - NULL Pointer Dereference
CVE-2025-27466
CWE-476 Medium
No
No
- 09.09.2025 SB2025090952
SB2025090955
SB2025091143
and 10 more
#VU112557 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36349
CWE-1342 Low
No
No
- 08.07.2025 SB2025070901
SB2025070903
SB2025072844
and 9 more
#VU112556 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36348
CWE-1342 Low
No
No
- 08.07.2025 SB2025070901
SB2025070903
SB2025072844
and 9 more
#VU112552 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36357
CWE-1342 Low
No
No
- 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 43 more
#VU112549 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36350
CWE-1342 Low
No
No
- 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 40 more
#VU112090 - Error Handling
CVE-2025-27465
CWE-388 Medium
No
No
- 01.07.2025 SB2025070176
SB2025070285
SB2025080601
and 2 more
#VU109000 - Resource Management Errors
CVE-2024-28956
CWE-399 High
No
No
- 13.05.2025 SB2025051308
SB2025051309
SB2025051320
and 46 more
#VU105104 - Deadlock
CVE-2025-1713
CWE-833 Medium
No
No
- 27.02.2025 SB20250227233
SB2025022801
SB2025022802
and 7 more
#VU101818 - NULL Pointer Dereference
CVE-2024-53240
CWE-476 Medium
No
No
- 18.12.2024 SB2024121808
SB20250115100
SB2025011731
and 18 more
#VU101817 - Processor optimization removal or modification of security-critical code
CVE-2024-53241
CWE-1037 Low
No
No
- 18.12.2024 SB2024121807
SB20250115100
SB2025011663
and 23 more
#VU100327 - Missing release of memory after effective lifetime
CVE-2024-45819
CWE-401 Medium
No
No
- 12.11.2024 SB20241112120
SB20241112131
SB2024111303
and 11 more
#VU100325 - Improper Locking
CVE-2024-45818
CWE-667 Medium
No
No
- 12.11.2024 SB20241112118
SB20241112131
SB2024111303
and 12 more
#VU97680 - Deadlock
CVE-2024-45817
CWE-833 Low
No
No
- 24.09.2024 SB2024092463
SB2024092464
SB2024092466
and 16 more
#VU96007 - Resource Management Errors
CVE-2024-31146
CWE-399 Medium
No
No
- 14.08.2024 SB2024081461
SB2024081602
SB2024081603
and 11 more


Showing elements 41 - 60 out of 441