Xen Xen

Name: Xen Xen
Brand: Xen

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical11high9medium0low

updated 2026-10-27

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-2201US	—	8.79% (95th)	—	no fix	2024-12-19	≤ See advisory "x86: Native Branch History Injection"
CVE-2021-28706US	high8.6	2.23% (83rd)	—	unspecified	2021-11-24	4 versions
CVE-2021-28700US	medium4.9	1.87% (79th)	—	unspecified	2021-08-27	2 versions
CVE-2021-28690US	medium6.5	0.99% (62nd)	—	unspecified	2021-06-29	3 versions
CVE-2025-1713US	—	0.86% (58th)	—	no fix	2025-07-17	—
CVE-2024-31143US	—	0.51% (43rd)	—	no fix	2024-07-18	—
CVE-2021-28702US	high7.6	0.44% (38th)	—	unspecified	2021-10-06	4.12.x → unspecified
CVE-2021-28695US	medium6.8	0.38% (32nd)	—	no fix	2021-08-27	6 versions
CVE-2021-28694US	medium6.8	0.38% (32nd)	—	no fix	2021-08-27	6 versions
CVE-2021-28707US	high8.8	0.37% (31st)	—	unspecified	2021-11-24	3 versions
CVE-2021-28709US	high7.8	0.37% (30th)	—	no fix	2021-11-24	5 versions
CVE-2021-28705US	high7.8	0.36% (30th)	—	no fix	2021-11-24	5 versions
CVE-2021-28696US	medium6.8OT elevated	0.36% (30th)	—	no fix	2021-08-27	6 versions
CVE-2021-28708US	high8.8	0.35% (29th)	—	unspecified	2021-11-24	3 versions
CVE-2021-28704US	high8.8	0.35% (29th)	—	unspecified	2021-11-24	3 versions
CVE-2021-28699US	medium5.5	0.35% (29th)	—	unspecified	2021-08-27	4.11.x → unspecified
CVE-2021-28698US	medium5.5	0.35% (28th)	—	unspecified	2021-08-27	5 versions
CVE-2021-28693US	medium5.5	0.32% (25th)	—	unspecified	2021-06-30	4 versions
CVE-2021-28687US	medium5.5	0.31% (24th)	—	unspecified	2021-06-11	3 versions
CVE-2021-28692US	high7.1	0.29% (21st)	—	no fix	2021-06-30	6 versions
CVE-2021-28710US	high8.8	0.29% (21st)	—	unspecified	2021-11-21	4.15.x → unspecified
CVE-2021-28701US	high7.8	0.27% (18th)	—	unspecified	2021-09-08	3 versions
CVE-2021-28697US	high7.8	0.26% (18th)	—	unspecified	2021-08-27	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management5 CVEs
CWE-124Buffer Underwrite ('Buffer Underflow')3 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2 CVEs
CWE-755Improper Handling of Exceptional Conditions2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan