PT-2026-136760

CVE-2026-102703

Published

2026-11-03

Updated

2026-11-04

CVSS 3.1

4.4

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Xen XSA-523: CVE-2026-102703/-102704 let a malicious guest read/write memory belonging to other VMs, including dom0.

All Xen versions from 4.6 onward are affected. No known mitigation.

Xen credits @Anthropic using @claudeai for the discovery.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

SUSE-SU-2026:5087-1

Found an issue in the description? Have something to add? Feel free to write us 👾