Citrix XenServer Flaw Allows Unauthenticated Host Compromise
Updates fix nine CVEs including unauthenticated remote takeover in XenServer 8.4 and 9; Citrix rates as Critical.
75
- Mentions · 7d1
- Mentions · 30d1
- All mentions2
- First seenSep 2, 2026
- Last mentioned4d ago
Timeline
2 articles · newest firstTwo critical Chrome flaws put users at risk on malicious websites
Google patched 26 Chrome flaws, including two critical use-after-frees and an actively exploited V8 sandbox escape (CVE-2026-85046); update to 152.0.7977.82/.83.
85
Related CVEs
by mentions- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
- CVE-2026-98432<1%9.8Use-after-free in Linux kernel IPv4 TCP options
- CVE-2026-84353<1%9.6Use-After-Free RCE in Google Chrome for Android Shared Tab Groups
- CVE-2026-84352<1%9.6Use-after-free in WebGL in Chrome for Android allows out-of-sandbox code execution
- CVE-2026-97631<1%9.5Remote buffer overflow in EDK2 BIOS
- CVE-2022-36763<1%7.8EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network
- CVE-2022-36764<1%7.8EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network
- CVE-2024-38796<1%5.9EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage()
- CVE-2024-38797<1%4.6EDK2 contains a vulnerability in the HashPeImageByType()
- Frame/grant ref mixing in Xen grant copy cache
Appears with
- Malwarebytesorganization · 1
- V8product · 1
- Google Chromeproduct · 1
- Googleorganization · 1
- XenServerproduct · 1
- Googlevendor · 1
- Citrixvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.