Xen Hypervisor Flaws Enable Cross-VM Memory Access, Prompting Urgent Patches
Two critical vulnerabilities in the Xen hypervisor allow malicious virtual machines to read and write the memory of other VMs, including the privileged dom0. The flaws, tracked as CVE-2026-102703 and CVE-2026-102704, affect all Xen versions from 4.6 onward. Patches are available for newer versions, but older releases lack fixes. No active exploitation has been reported, yet the risk is rated Critical due to the potential for complete host takeover.