xen has 4 CVEs on record between 2022 and 2026. 3 were published in the last 90 days. The busiest recent month was September 2026 with 3. The median CVSS is 6.0 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.0
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Worst active — by depth score
CVE-2026-79602High· 8.8A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen.48CVE-2026-62437Medium· 6.5When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early…36CVE-2022-23960Medium· 5.6Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB31CVE-2026-79603Medium· 4.3x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them24
xen vulnerabilities
CVEs affecting xen, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-79603Medium· 4.3x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them
x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen (if needed) when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush,…
CVE-2026-79602High· 8.8⚖ disputedA guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen.
A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen.
CVE-2026-62437Medium· 6.5When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early…
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early…
CVE-2022-23960Medium· 5.6Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB
Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted br…