Lucene search
+L

52 matches found

NVD
NVD
•added 2026/11/04 11:17 a.m.•7 views

CVE-2026-102703

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

4.4CVSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/04 10:30 a.m.•10 views

CVE-2026-102704 arbitrary read/write via grant copy

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

SaveExploits0References1
Mend
Mend
•added 2026/11/04 10:30 a.m.•3 views

CVE-2026-102704

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

9.3CVSS6AI score
SaveExploits0References2
CVE
CVE
•added 2026/11/04 10:30 a.m.•19 views

CVE-2026-102704

The Xen hypervisor contains a vulnerability where a malicious guest VM can read and write the memory of other VMs, including dom0 . The root cause lies in the grant copy operation; for performance, Xen caches validated data, but a misplaced check incorrectly allowed copying by frame number outsid...

4.4CVSS6AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/11/04 10:30 a.m.•4 views

EUVD-2026-116864

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

4.4CVSS6AI score
SaveExploits0References1
Mend
Mend
•added 2026/11/04 10:30 a.m.•5 views

CVE-2026-102703

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

9.3CVSS6AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/04 10:30 a.m.•8 views

CVE-2026-102703 arbitrary read/write via grant copy

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

SaveExploits0References1
CVE
CVE
•added 2026/11/04 10:30 a.m.•30 views

CVE-2026-102703

A flaw exists in the Xen hypervisor involving Grant Copy operations used for memory sharing between virtual machines. Due to performance optimizations, Xen caches internal validation data; however, it fails to properly re-validate this data when frame numbers and grant references are intermixed. ...

4.4CVSS6AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/11/04 10:30 a.m.•5 views

EUVD-2026-116863

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

4.4CVSS6AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/04 12:00 a.m.•2 views

CVE-2026-102704: Xen: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/11/04 12:00 a.m.•0 views

PT-2026-136925

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

6AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/04 12:00 a.m.•1 views

CVE-2026-102703: Xen: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

6.1AI score
SaveExploits0References1
Xen Project
Xen Project
•added 2026/11/03 12:00 p.m.•9 views

arbitrary read/write via grant copy

ISSUE DESCRIPTION A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches details internally to reuse already validated data. The conditions on when to re-validate the internal data...

4.4CVSS6.2AI score
SaveExploits0Affected Software1
SUSE Linux
SUSE Linux
•added 2026/08/03 11:33 a.m.•31 views

Security update for xen

This update for xen fixes the following issues CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. CVE-2026-62426,CVE-2026-62427: sysctl and platform-op...

8.9CVSS6.5AI score0.0045EPSS
SaveExploits0References50
osv_suse
osv_suse
•added 2026/08/03 11:33 a.m.•25 views

SUSE-SU-2026:3451-1 Security update for xen

This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. - CVE-2026-62426,CVE-2026-62427: sysctl and...

8.8CVSS6.3AI score0.0045EPSS
SaveExploits0References26
SUSE CVE
SUSE CVE
•added 2026/07/30 4:35 p.m.•20 views

SUSE CVE-2026-62428

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is "pinned", what is...

8.1CVSS5.8AI score0.00115EPSS
SaveExploits0References8
osv_suse
osv_suse
•added 2026/07/29 11:18 a.m.•22 views

SUSE-SU-2026:3409-1 Security update for xen

This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. - CVE-2026-62426,CVE-2026-62427: sysctl and...

8.8CVSS6.3AI score0.0045EPSS
SaveExploits0References28
Tenable Nessus
Tenable Nessus
•added 2026/07/29 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-62428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy...

7.8CVSS5.8AI score0.00115EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/07/28 6:00 p.m.•17 views

CVE-2026-62428

A flaw was found in Xen. When processing grant-copy operations, a type confusion vulnerability can occur if the grant is already in use by another operation. This can lead to permission checks being performed on an incorrect memory page, potentially allowing an attacker to bypass security...

7.8CVSS5.8AI score0.00115EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/28 1:19 p.m.•29 views

CVE-2026-62428

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is "pinned", what is...

7.8CVSS0.00115EPSS
SaveExploits0References3
Rows per page
Query Builder