Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
On July 28, 2026, the Xen Project released multiple security advisories (XSA-508 to XSA-494) addressing vulnerabilities in their virtualization platform. Key vulnerabilities include CVE-2026-62434, which involves a potential denial of service due to improper handling of special pages, and CVE-2026-6...
SUSE has issued a security update addressing CVE-2025-58149, which involves incorrect removal of permissions on PCI device unplug. This vulnerability allows PV guests to access memory of devices that are no longer assigned to them. The update applies to Xen versions 4.17.6 and 4.20.2, and users are...
openSUSE and SUSE released an important update for Xen addressing multiple vulnerabilities, including CVE-2025-27466, CVE-2025-58142, and CVE-2025-58143. These vulnerabilities involve NULL pointer dereferences and an information leak in the Viridian interface, potentially affecting systems utilizing...