CVE-2016-9381

—

CVSS 3.1

7.5 high

EPSS

<1%p22

Published

Jan 23, 2017 (Jan 23, 2017)

Modified

Jun 17, 2026

Description

Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.

Vendors: qemu citrix
Products: qemu, xenserver
Weakness: CWE-362
Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.