XCP-ng RBAC Storage Driver Privilege Escalation

The vulnerability of the storagedriverdomain driver in the Role-Based Access Control RBAC subsystem of the XCP-ng hypervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to elevate their...

XCP-ng RBAC Privilege Escalation

The vulnerability of function systemdomains.ml:30-35 in the RBAC access control subsystem of the XCP-ng hypervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to elevate their privileges...

CVE-2025-38046

This CVE entry is rejected/not used as stated; it does not represent an active vulnerability.

Excessive Retries Occur when a Provisioning Server Target Device is Deployed on a XenServer Platform

When the Citrix Provisioning Server target device is deployed on a XenServer platform, the device may experience some of the following symptoms: Excessive retries while performing a physical to virtual target build Slow ICA performance when using XenDesktop Freezing or locking with XenDesktop whi...

Xen Hypervisor Privilege Escalation

The vulnerability of component mm.c arch/x86/mm.c in the Xen hypervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to enhance their privileges by using functions related t...

Xen Hypervisor DoS Confidential Information Execution Arbitrary Code

The vulnerability of the Xen hypervisor and the XenServer platform for server virtualization exists due to insufficient validation of input data. Exploiting this vulnerability can allow a guest user of the 86-bit operating system running locally to obtain confidential information, execute arbitra...