Security Advisory

CVE-2025-27463

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-09 14:29:49

Last updated 2026-07-09 15:52:14

Assigner XEN

CVSS score 9.4

State PUBLISHED

Description

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose various facilities to userspace. Several of these have no security descriptor, and are therefore fully accessible to unprivileged users. These are: 1. XenCons, CVE-2025-27462 2. XenIface, CVE-2025-27463 3. XenBus, CVE-2025-27464

← Browse all CVEs View on cve.org ↗