security@xen.org
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS security@xen.org
03
assessed vulnerabilities (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-42486US | — | — | ||
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]
XAPI can configure different users with different r… | ||||
| CVE-2026-23562US | —OT elevated | — | ||
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]
XAPI can configure different users with different r… | ||||
| CVE-2026-23561US | — | — | ||
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]
XAPI can configure different users with different r… | ||||
| CVE-2026-23560US | — | — | ||
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]
XAPI can configure different users with different r… | ||||
| CVE-2026-23559US | — | — | ||
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]
XAPI can configure different users with different… | ||||
| CVE-2026-23556US | — | — | ||
When oxenstored is tearing a domain down, the node data is cleaned up
but the usage counts are leaked.
When the domain ID is eventually reused, the new domain can create fewer
nod… | ||||
| CVE-2025-58151US | — | — | ||
varstored is a component of the Xapi toolstack handling UEFI Variables
for a VM. It has a communication path with OVMF inside the VM involving
mapping a buffer prepared by OVMF.… | ||||
| CVE-2025-58146US | — | — | ||
There are multiple issues.
1. Updates to the XAPI database sanitise input strings, but try
generating the notification using the unsanitised input. This
causes the datab… | ||||
| CVE-2025-27464US | —OT elevated | — | ||
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose various facilities to… | ||||
| CVE-2025-27463US | —OT elevated | — | ||
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose various facilities to… | ||||
| CVE-2025-27462US | —OT elevated | — | ||
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]
The Windows PV drivers expose various facilities… | ||||