https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:05:38 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0090 certfr-2026-avi-0090 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0090 https://cve.radiocsirt.org/vuln/euvd-2026-335424 EUVD-2026-335424 https://cve.radiocsirt.org/vuln/euvd-2026-335424 https://cve.radiocsirt.org/vuln/fkie_cve-2025-58151 <p>varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF.</p> <p>Within varstored, there were insufficient compiler barriers, creating TOCTOU issues with data in the shared buffer.</p> <p>The exact vulnerable behaviour depends on the code generated by the compiler. In a build of varstored using default settings, the attacker can control an index used in a jump table.</p> <p>varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF.</p> <p>Within varstored, there were insufficient compiler barriers, creating TOCTOU issues with data in the shared buffer.</p> <p>The exact vulnerable behaviour depends on the code generated by the compiler. In a build of varstored using default settings, the attacker can control an index used in a jump table.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-58151 https://cve.radiocsirt.org/vuln/ghsa-78gx-8v3c-jqwc <p>varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF.</p> <p>Within varstored, there were insufficient compiler barriers, creating TOCTOU issues with data in the shared buffer.</p> <p>The exact vulnerable behaviour depends on the code generated by the compiler. In a build of varstored using default settings, the attacker can control an index used in a jump table.</p> <p>varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF.</p> <p>Within varstored, there were insufficient compiler barriers, creating TOCTOU issues with data in the shared buffer.</p> <p>The exact vulnerable behaviour depends on the code generated by the compiler. In a build of varstored using default settings, the attacker can control an index used in a jump table.</p> https://cve.radiocsirt.org/vuln/ghsa-78gx-8v3c-jqwc https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0225 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um seine Rechte zu erweitern und einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um seine Rechte zu erweitern und einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0225