CVE-2026-23562

A flaw was found in Xen. A virtual machine administrator vm-admin, a user with limited privileges, could bypass security checks related to PCI passthrough configuration. This allowed the vm-admin to gain unauthorized access to host hardware. This could lead to privilege escalation, enabling the...

CVE-2026-23562

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...

SUSE CVE-2018-10892

The default OCI linux spec in oci/defaultslinux.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host's hardware like enabling/disabling bluetooth or turning up/down keyboard brightness...