{"schema_version":1,"title":"Xen Project Xen vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 40 vulnerabilities in Xen Project Xen: 0 in the last 7 days and 21 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-79603, was published on 8 September 2026.","url":"https://junglewise.ai/threats/technologies/xen","json_url":"https://junglewise.ai/threats/technologies/xen.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/xen","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":11,"all_time":40,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":3,"last_90_days":21,"last_365_days":28},"latest":[{"cve":"CVE-2026-79603","cvss":4.3,"epss":0.0036,"slug":"cve-2026-79603-xen-tlb-flush-race-condition-allowing-stale-page-modification","title":"Xen TLB flush race condition allowing stale page modification","severity":"medium","exploited":false,"published_at":"2026-09-08T13:17:27.253+00:00","url":"https://junglewise.ai/threats/cve-2026-79603-xen-tlb-flush-race-condition-allowing-stale-page-modification"},{"cve":"CVE-2026-79602","cvss":8.8,"epss":0.0017,"slug":"cve-2026-79602-xen-improper-hvm-emulation-return-code-handling","title":"Xen improper HVM emulation return code handling","severity":"high","exploited":false,"published_at":"2026-09-08T13:17:27.157+00:00","url":"https://junglewise.ai/threats/cve-2026-79602-xen-improper-hvm-emulation-return-code-handling"},{"cve":"CVE-2026-62437","cvss":6.5,"epss":0.0012,"slug":"cve-2026-62437-xen-hypervisor-memory-leak-in-irq-tracking-during-guest-cleanup","title":"Xen hypervisor memory leak in IRQ tracking during guest cleanup","severity":"medium","exploited":false,"published_at":"2026-09-08T13:17:19.623+00:00","url":"https://junglewise.ai/threats/cve-2026-62437-xen-hypervisor-memory-leak-in-irq-tracking-during-guest-cleanup"},{"cve":"CVE-2026-62436","cvss":0,"slug":"cve-2026-62436-xen-grant-table-race-condition-in-version-switching","title":"Xen grant table race condition in version switching","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:02.553+00:00","url":"https://junglewise.ai/threats/cve-2026-62436-xen-grant-table-race-condition-in-version-switching"},{"cve":"CVE-2026-62435","cvss":8.8,"slug":"cve-2026-62435-xen-grant-table-race-condition-in-version-switching","title":"Xen grant table race condition in version switching","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:02.433+00:00","url":"https://junglewise.ai/threats/cve-2026-62435-xen-grant-table-race-condition-in-version-switching"},{"cve":"CVE-2026-62434","cvss":0,"slug":"cve-2026-62434-xen-memory-management-state-corruption-in-populate-on-demand","title":"Xen memory management state corruption in Populate on Demand","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:02.317+00:00","url":"https://junglewise.ai/threats/cve-2026-62434-xen-memory-management-state-corruption-in-populate-on-demand"},{"cve":"CVE-2026-62433","cvss":0,"slug":"cve-2026-62433-xen-dm-op-missing-buffer-validation-in-hypercalls","title":"Xen DM_OP missing buffer validation in hypercalls","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:02.207+00:00","url":"https://junglewise.ai/threats/cve-2026-62433-xen-dm-op-missing-buffer-validation-in-hypercalls"},{"cve":"CVE-2026-62432","cvss":0,"slug":"cve-2026-62432-xen-race-condition-in-fifo-event-channel-expansion","title":"Xen race condition in FIFO event channel expansion","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:02.11+00:00","url":"https://junglewise.ai/threats/cve-2026-62432-xen-race-condition-in-fifo-event-channel-expansion"},{"cve":"CVE-2026-62431","cvss":6.8,"slug":"cve-2026-62431-xen-viridian-stimer-division-by-zero-denial-of-service","title":"Xen Viridian STIMER division by zero denial of service","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:02.01+00:00","url":"https://junglewise.ai/threats/cve-2026-62431-xen-viridian-stimer-division-by-zero-denial-of-service"},{"cve":"CVE-2026-62430","cvss":0,"slug":"cve-2026-62430-xen-x86-out-of-bounds-read-in-vrtc-emulation","title":"Xen x86 out-of-bounds read in vRTC emulation","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:01.913+00:00","url":"https://junglewise.ai/threats/cve-2026-62430-xen-x86-out-of-bounds-read-in-vrtc-emulation"},{"cve":"CVE-2026-62429","cvss":0,"slug":"cve-2026-62429-xen-vnuma-race-condition-during-domain-destruction","title":"Xen vNUMA race condition during domain destruction","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:01.81+00:00","url":"https://junglewise.ai/threats/cve-2026-62429-xen-vnuma-race-condition-during-domain-destruction"},{"cve":"CVE-2026-62428","cvss":8.8,"slug":"cve-2026-62428-xen-grant-table-type-confusion-in-grant-copy","title":"Xen grant-table type confusion in grant-copy","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:01.713+00:00","url":"https://junglewise.ai/threats/cve-2026-62428-xen-grant-table-type-confusion-in-grant-copy"},{"cve":"CVE-2026-62427","cvss":0,"slug":"cve-2026-62427-xen-project-denial-of-service-in-platform-op-locks","title":"Xen Project denial of service in platform-op locks","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:01.613+00:00","url":"https://junglewise.ai/threats/cve-2026-62427-xen-project-denial-of-service-in-platform-op-locks"},{"cve":"CVE-2026-62426","cvss":0,"slug":"cve-2026-62426-xen-project-xen-denial-of-service-via-unfair-sysctl-and-platform","title":"Xen Project Xen denial of service via unfair sysctl and platform-op locks","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:01.517+00:00","url":"https://junglewise.ai/threats/cve-2026-62426-xen-project-xen-denial-of-service-via-unfair-sysctl-and-platform"},{"cve":"CVE-2026-62425","cvss":8.8,"slug":"cve-2026-62425-xen-libfsimage-buffer-overflow-in-rock-ridge-ce-record-processing","title":"Xen libfsimage buffer overflow in Rock Ridge CE record processing","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:01.41+00:00","url":"https://junglewise.ai/threats/cve-2026-62425-xen-libfsimage-buffer-overflow-in-rock-ridge-ce-record-processing"},{"cve":"CVE-2026-62424","cvss":0,"slug":"cve-2026-62424-xen-libfsimage-buffer-overrun-in-rock-ridge-nm-record-processing","title":"Xen libfsimage buffer overrun in Rock Ridge NM record processing","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:01.31+00:00","url":"https://junglewise.ai/threats/cve-2026-62424-xen-libfsimage-buffer-overrun-in-rock-ridge-nm-record-processing"},{"cve":"CVE-2026-62423","cvss":0,"slug":"cve-2026-62423-xen-libfsimage-buffer-overrun-in-rock-ridge-extension-loop","title":"Xen libfsimage buffer overrun in Rock Ridge extension loop","severity":"info","exploited":false,"published_at":"2026-07-28T13:19:01.21+00:00","url":"https://junglewise.ai/threats/cve-2026-62423-xen-libfsimage-buffer-overrun-in-rock-ridge-extension-loop"},{"cve":"CVE-2026-42495","cvss":8.8,"slug":"cve-2026-42495-xen-libfsimage-integer-underflow-in-iso9660-system-use-area","title":"Xen libfsimage integer underflow in iso9660 System Use area calculation","severity":"info","exploited":false,"published_at":"2026-07-28T13:18:32.493+00:00","url":"https://junglewise.ai/threats/cve-2026-42495-xen-libfsimage-integer-underflow-in-iso9660-system-use-area"},{"cve":"CVE-2026-42494","cvss":0,"slug":"cve-2026-42494-xen-libfsimage-buffer-overruns-in-iso9660-handling","title":"Xen libfsimage buffer overruns in iso9660 handling","severity":"info","exploited":false,"published_at":"2026-07-28T13:18:32.37+00:00","url":"https://junglewise.ai/threats/cve-2026-42494-xen-libfsimage-buffer-overruns-in-iso9660-handling"},{"cve":"CVE-2026-42493","slug":"cve-2026-42493-xen-project-denial-of-service-in-x86-shadow-paging","title":"Xen Project Denial of Service in x86 shadow paging","severity":"info","exploited":false,"published_at":"2026-07-28T13:18:32.247+00:00","url":"https://junglewise.ai/threats/cve-2026-42493-xen-project-denial-of-service-in-x86-shadow-paging"},{"cve":"CVE-2026-42492","cvss":6.5,"slug":"cve-2026-42492-xen-virq-event-channel-binding-error-in-xenstore","title":"Xen vIRQ event channel binding error in Xenstore","severity":"info","exploited":false,"published_at":"2026-07-28T13:18:32.123+00:00","url":"https://junglewise.ai/threats/cve-2026-42492-xen-virq-event-channel-binding-error-in-xenstore"},{"cve":"CVE-2026-42490","cvss":6.5,"slug":"cve-2026-42490-xen-improper-locking-in-domctl-operations","title":"Xen improper locking in domctl operations","severity":"medium","exploited":false,"published_at":"2026-06-18T14:17:25.6+00:00","url":"https://junglewise.ai/threats/cve-2026-42490-xen-improper-locking-in-domctl-operations"},{"cve":"CVE-2026-42489","cvss":5.3,"slug":"cve-2026-42489-xen-project-xen-improper-locking-in-domctl-operations","title":"Xen Project Xen improper locking in domctl operations","severity":"medium","exploited":false,"published_at":"2026-06-18T14:17:25.507+00:00","url":"https://junglewise.ai/threats/cve-2026-42489-xen-project-xen-improper-locking-in-domctl-operations"},{"cve":"CVE-2026-42488","cvss":8.1,"slug":"cve-2026-42488-xen-x86-mapcache-corruption-in-shadow-paging-error-paths","title":"Xen x86 mapcache corruption in shadow paging error paths","severity":"high","exploited":false,"published_at":"2026-06-18T14:17:25.41+00:00","url":"https://junglewise.ai/threats/cve-2026-42488-xen-x86-mapcache-corruption-in-shadow-paging-error-paths"},{"cve":"CVE-2026-42487","cvss":7.9,"slug":"cve-2026-42487-xen-x86-hvm-race-condition-in-i-o-port-list-traversal","title":"Xen x86 HVM race condition in I/O port list traversal","severity":"high","exploited":false,"published_at":"2026-06-18T14:17:25.297+00:00","url":"https://junglewise.ai/threats/cve-2026-42487-xen-x86-hvm-race-condition-in-i-o-port-list-traversal"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":18},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Xen Project Windows PV drivers","slug":"windows-pv-drivers","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/windows-pv-drivers"}],"technology":{"hub":true,"name":"Xen Project Xen","slug":"xen","vendor":{"name":"Xen Project","slug":"xen-project","url":"https://junglewise.ai/threats/vendors/xen-project"},"aliases":[],"category":"hypervisor","homepage":"https://xenproject.org/","repo_url":"https://xenbits.xen.org/gitweb/","description":"Xen is an open-source type-1 hypervisor that allows multiple operating systems to execute on the same computer hardware concurrently.","url":"https://junglewise.ai/threats/technologies/xen"},"most_severe":[{"cve":"CVE-2026-79602","cvss":8.8,"epss":0.0017,"slug":"cve-2026-79602-xen-improper-hvm-emulation-return-code-handling","title":"Xen improper HVM emulation return code handling","severity":"high","exploited":false,"published_at":"2026-09-08T13:17:27.157+00:00","url":"https://junglewise.ai/threats/cve-2026-79602-xen-improper-hvm-emulation-return-code-handling"},{"cve":"CVE-2016-9383","cvss":8.8,"slug":"cve-2016-9383-xen-broken-bit-test-instruction-emulation-memory-corruption","title":"Xen broken bit test instruction emulation memory corruption","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.86+00:00","url":"https://junglewise.ai/threats/cve-2016-9383-xen-broken-bit-test-instruction-emulation-memory-corruption"},{"cve":"CVE-2026-42488","cvss":8.1,"slug":"cve-2026-42488-xen-x86-mapcache-corruption-in-shadow-paging-error-paths","title":"Xen x86 mapcache corruption in shadow paging error paths","severity":"high","exploited":false,"published_at":"2026-06-18T14:17:25.41+00:00","url":"https://junglewise.ai/threats/cve-2026-42488-xen-x86-mapcache-corruption-in-shadow-paging-error-paths"},{"cve":"CVE-2026-42487","cvss":7.9,"slug":"cve-2026-42487-xen-x86-hvm-race-condition-in-i-o-port-list-traversal","title":"Xen x86 HVM race condition in I/O port list traversal","severity":"high","exploited":false,"published_at":"2026-06-18T14:17:25.297+00:00","url":"https://junglewise.ai/threats/cve-2026-42487-xen-x86-hvm-race-condition-in-i-o-port-list-traversal"},{"cve":"CVE-2016-9379","cvss":7.9,"slug":"cve-2016-9379-xen-pygrub-delimiter-injection-in-s-expression-output","title":"Xen pygrub delimiter injection in S-expression output","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.707+00:00","url":"https://junglewise.ai/threats/cve-2016-9379-xen-pygrub-delimiter-injection-in-s-expression-output"},{"cve":"CVE-2016-10013","cvss":7.8,"slug":"cve-2016-10013-xen-privilege-escalation-via-syscall-singlestep-emulation","title":"Xen privilege escalation via SYSCALL singlestep emulation","severity":"high","exploited":false,"published_at":"2017-01-26T15:59:00.127+00:00","url":"https://junglewise.ai/threats/cve-2016-10013-xen-privilege-escalation-via-syscall-singlestep-emulation"},{"cve":"CVE-2016-9386","cvss":7.8,"slug":"cve-2016-9386-xen-x86-emulator-privilege-escalation-via-null-segment-handling","title":"Xen x86 emulator privilege escalation via NULL segment handling","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.957+00:00","url":"https://junglewise.ai/threats/cve-2016-9386-xen-x86-emulator-privilege-escalation-via-null-segment-handling"},{"cve":"CVE-2016-9382","cvss":7.8,"slug":"cve-2016-9382-xen-x86-task-switch-privilege-escalation-in-vm86-mode","title":"Xen x86 task switch privilege escalation in VM86 mode","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.83+00:00","url":"https://junglewise.ai/threats/cve-2016-9382-xen-x86-task-switch-privilege-escalation-in-vm86-mode"},{"cve":"CVE-2016-9381","cvss":7.5,"slug":"cve-2016-9381-xen-qemu-race-condition-in-shared-ring-processing","title":"Xen QEMU race condition in shared ring processing","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.8+00:00","url":"https://junglewise.ai/threats/cve-2016-9381-xen-qemu-race-condition-in-shared-ring-processing"},{"cve":"CVE-2016-9380","cvss":7.5,"slug":"cve-2016-9380-xen-pygrub-arbitrary-file-read-and-deletion-via-delimiter","title":"Xen pygrub arbitrary file read and deletion via delimiter injection","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.753+00:00","url":"https://junglewise.ai/threats/cve-2016-9380-xen-pygrub-arbitrary-file-read-and-deletion-via-delimiter"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}