Vendor
Xen
496 known vulnerabilities in products by Xen, 0 of them actively exploited (CISA KEV).
Key figures
496
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
16
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| High | CVE-2024-31142 | x86: Incorrect logic for BTC/SRSO mitigations | 7.5 | |
| High | CVE-2018-8897 | Citrix XenServer: Privilege Escalation | 7.8 | |
| Critical | CVE-2017-10918 | Xen: security vulnerability | 10.0 | |
| Medium | CVE-2023-46842 | x86 HVM hypercalls may trigger Xen bug check | 6.5 | |
| Critical | CVE-2017-10913 | Xen: Information Disclosure | 9.8 | |
| Critical | CVE-2017-10912 | Xen: security vulnerability | 10.0 | |
| Critical | CVE-2017-10920 | Xen: Memory Corruption | 10.0 | |
| Critical | CVE-2017-10921 | Xen: Memory Corruption | 10.0 | |
| Critical | CVE-2015-8104 | Oracle VM VirtualBox: Denial of Service | 10.0 | |
| Critical | CVE-2018-12892 | Xen: security vulnerability | 9.9 | |
| Critical | CVE-2019-18425 | Xen: security vulnerability | 9.8 | |
| Critical | CVE-2017-15597 | Xen: Memory Corruption | 9.1 | |
| Medium | CVE-2023-20588 | Speculative Leaks | 5.5 | |
| Critical | CVE-2017-10917 | Xen: NULL Pointer Dereference | 9.1 | |
| Medium | CVE-2024-2201 | Xen: security vulnerability | 4.7 | |
| High | CVE-2022-4949 | AdSanity < 1.8.2 - Authenticated Arbitrary File Upload | 8.8 | |
| Medium | CVE-2022-21123 | Intel(R) Processors: Information Disclosure | 5.5 | |
| Medium | CVE-2023-20593 | AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4: security vulnerability | 5.5 | |
| Medium | CVE-2022-29900 | AMD Processors: Code Execution | 6.5 | |
| Medium | CVE-2022-21166 | Intel(R) Processors: Information Disclosure | 5.5 | |
| Medium | CVE-2022-21125 | Intel(R) Processors: Information Disclosure | 5.5 | |
| High | CVE-2015-8555 | Citrix XenServer: Information Disclosure | 8.6 | |
| High | CVE-2021-28706 | Xen: security vulnerability | 8.6 | |
| Medium | CVE-2022-21127 | Intel(R) Processors: Information Disclosure | 5.5 | |
| Medium | CVE-2022-29901 | Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed) | 5.6 |