CVE-2016-7094: Xen

Medium severity, CVSS 4.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update.

Affected products

• Xen Xen: up to and including 4.7.0

Published 2016-09-21. Last modified 2026-06-17.