Known vulnerabilities in Xen - page 4

Software: Xen
Software CPE: cpe:2.3:a:xen_project:xen:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 447
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Xen Xen is affected by 447 known vulnerabilities: 1 critical, 16 high, 162 medium, 268 low Critical High Medium Low

Vulnerabilities (447)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101818 - NULL Pointer Dereference
CVE-2024-53240
CWE-476 Medium
No
No
- 18.12.2024 SB2024121808
SB20250115100
SB2025011731
and 18 more
#VU101817 - Processor optimization removal or modification of security-critical code
CVE-2024-53241
CWE-1037 Low
No
No
- 18.12.2024 SB2024121807
SB20250115100
SB2025011663
and 23 more
#VU100327 - Missing release of memory after effective lifetime
CVE-2024-45819
CWE-401 Medium
No
No
- 12.11.2024 SB20241112120
SB20241112131
SB2024111303
and 11 more
#VU100325 - Improper Locking
CVE-2024-45818
CWE-667 Medium
No
No
- 12.11.2024 SB20241112118
SB20241112131
SB2024111303
and 12 more
#VU97680 - Deadlock
CVE-2024-45817
CWE-833 Low
No
No
- 24.09.2024 SB2024092463
SB2024092464
SB2024092466
and 16 more
#VU96007 - Resource Management Errors
CVE-2024-31146
CWE-399 Medium
No
No
- 14.08.2024 SB2024081461
SB2024081602
SB2024081603
and 11 more
#VU96006 - Error Handling
CVE-2024-31145
CWE-388 Medium
No
No
- 14.08.2024 SB2024081461
SB2024081602
SB2024081603
and 11 more
#VU94499 - Improper Locking
CVE-2024-31143
CWE-667 Medium
No
No
- 17.07.2024 SB20240717125
SB2024073049
SB2024080547
and 5 more
#VU94498 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2024-31144
CWE-74 Medium
No
No
- 17.07.2024 SB20240717125
#VU89353 - Missing release of memory after effective lifetime
CVE-2024-27393
CWE-401 Low
No
No
- 10.05.2024 SB2024051049
SB2024062612
SB2024062614
and 21 more
#VU88374 - Processor optimization removal or modification of security-critical code
CVE-2024-2201
CWE-1037 Medium
No
No
4.15.6, 4.16.6, 4.17.4, 4.18.2 10.04.2024 SB2024041029
SB2024041044
SB2024041045
and 67 more
#VU88372 - Type confusion
CVE-2024-31142
CWE-843 Low
No
No
- 10.04.2024 SB2024041027
SB2024041044
SB2024041045
and 11 more
#VU88228 - Improper input validation
CVE-2023-46842
CWE-20 Medium
No
No
- 09.04.2024 SB2024040941
SB2024041044
SB2024041045
and 13 more
#VU87457 - Exposure of sensitive information to an unauthorized actor
CVE-2023-28746
CWE-200 Low
No
No
- 12.03.2024 SB20240312343
SB20240312345
SB20240312357
and 51 more
#VU87374 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-2193
CWE-362 Low
No
No
- 12.03.2024 SB20240312315
SB2024031401
SB2024031501
and 13 more
#VU86860 - Resource Management Errors
CVE-2023-46841
CWE-399 Medium
No
No
- 27.02.2024 SB2024022774
SB2024022776
SB2024022801
and 4 more
#VU85929 - Permissions, Privileges, and Access Controls
CVE-2023-46839
CWE-264 Low
No
No
- 31.01.2024 SB2024013109
SB2024013112
SB2024013113
and 9 more
#VU85928 - Permissions, Privileges, and Access Controls
CVE-2023-46840
CWE-264 Medium
No
No
- 31.01.2024 SB2024013109
SB2024013115
SB2024013121
and 2 more
#VU85682 - Improper input validation
CVE-2023-46838
CWE-20 Low
No
No
- 22.01.2024 SB2024012251
SB2024012342
SB2024012904
and 35 more
#VU84103 - Resource Management Errors
CVE-2023-46837
CWE-399 Low
No
No
- 12.12.2023 SB2023121240
SB2024013121
SB2024013134
and 1 more


Showing elements 61 - 80 out of 447