CVE-2018-19962

—

CVSS 3.0

7.8 high

EPSS

<1%p34

Published

Dec 8, 2018 (Dec 8, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones.

Vendors: xen debian citrix
Products: xen, debian linux, xenserver
Weakness: CWE-200
Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.