Citrix XenServer Vulnerability Could Allow Host Compromise
CVE-2026-98432 in XenServer 8.4 and 9 requires management network access for unauthenticated host takeover.
1
Stories per day · 30 days
3 RSS
Relatedcitrix3cve2virtualization2xen2xenserver2amd1credential-theft1esxi1frontier-models1ghostframe1iommu1kvm1labscon1linux1mmio1patch1ransomware1sandboxing1
13 stories, newest first · one card per story
Stories tagged #hypervisor
GhostFrame toolkit hijacks VMware ESXi hosts and steals Windows credentials
Recorded Future says TAG-218, overlapping Settra, needs existing ESXi root and dumps guest secrets without guest malware.
AMD IOMMU can read past the device table, Xen says (CVE-2024-21963)
The Xen excerpt says some AMD IOMMUs read beyond a device table whose size the OS or hypervisor chose.
Xen hypervisor flaws let one VM read and write any other VM memory
Xen versions 4.6+ allow a malicious guest VM to read and write memory of other VMs including dom0 via grant copy permission checks.
1
Mickens argues AI safety and hardware isolation at LABScon 26
He cites sandbox escapes and describes Guillotine, a hypervisor that isolates model CPU cores from hypervisor state.
3
Linux KVM/x86 stale SMM MMIO cache bypasses write tracking
A guest can make a tracked RAM write look like KVM_EXIT_MMIO, so a VMM may change the page without write tracking.
Citrix XenServer Vulnerabilities Could Allow Malicious VM Users to Compromise Host Systems
Citrix disclosed four XenServer flaws that may let privileged guest users compromise or crash the host.
Citrix Patches XenServer Vulnerabilities That Could Enable Host Compromise
Citrix patched four XenServer flaws, three of which could let a privileged guest compromise or crash the host.
CVE for illumos and distros: VMM/BHYVE
illumos disclosed CVE-2026-102916, a bhyve REP-prefix emulation bug that mishandles CPU flags.
Security researcher claims to they found KVM guest-host escape flaw
Researcher claims a KVM guest-to-host escape zero-day; Vercel confirmed it, but no details are public.
4
Building a Linux GPU Driver for the M4 Mac Mini in One Month
Two developers built a fully OpenGL ES 3.0 compliant Linux GPU driver for the M4 Mac Mini in one month via clean-room reverse engineering.
Xen Security Advisory 511 v3 (CVE-2026-79603) - Unconditionally do TLB flushing ahead of page scrubbing
Xen Project released XSA-511 (CVE-2026-79603) fixing missing TLB flushes before page scrubbing that can leak x86 PV guest data.
Xen Security Advisory 509 v3 (CVE-2026-62437) - x86: DMs may cause mem leak by IRQ binding
Xen Project released XSA-509 (CVE-2026-62437) fixing a memory leak in IRQ tracking when guests with assigned PCI devices are terminated.