CVE-2026-20763

The CVE concerns Intel TDX Guest software prior to version 0.3.1, where an incorrect calculation in Ring 3: User Applications may enable local privilege escalation. The issue is triggered by a privileged system software actor with high privileges and no user interaction, leading to potential low ...

Denial Of Service (DoS)

xen is vulnerable to denial of service DoS. The vulnerability exists through when acting upon a guest XSRESETWATCHES request, and not all tracking information is freed, through an unbounded memory usage in oxenstored...

broken AMD FPU FIP/FDP/FOP leak workaround

ISSUE DESCRIPTION There is a workaround in Xen to deal with the fact that AMD CPUs don't load the x86 registers FIP and possibly FCS, FDP and possibly FDS, and FOP from memory via XRSTOR or FXRSTOR when there is no pending unmasked exception. See XSA-52. However, this workaround does not cover al...

CVE-2002-2376

Cross-site scripting XSS vulnerability in E-Guestsign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the 1 full name, 2 email, 3 homepage, and 4 location parameters. NOTE: this issue might overlap CVE-2005-1605...