CVE-2014-4021: Xen

Low severity, CVSS 2.7. EPSS: 0.7% chance of exploitation in the next 30 days.

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors.

Affected products

• Xen Xen: version 3.2.0 only; version 3.2.1 only; version 3.2.2 only; version 3.2.3 only; version 4.0.0 only; version 4.0.1 only; …

Published 2014-06-18. Last modified 2026-06-17.