https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:14:13.656186+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-27462 CVE-2025-27462 — WinPVDrivers: Excessive permissions on user-exposed devices 2026-10-07T15:14:13.702586+00:00

Affected: Xen Windows PV drivers

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]

The Windows PV drivers expose various facilities to userspace. Several of these have no security descriptor, and are therefore fully accessible to unprivileged users. These are:

1. XenCons, CVE-2025-27462 2. XenIface, CVE-2025-27463 3. XenBus, CVE-2025-27464