Two Xen hypervisor flaws let a rogue VM access other VMs' memory; Claude credited with finding them
Advisory XSA-523 covers CVE-2026-102703 and CVE-2026-102704, which could expose other guests and dom0. Patches exist for some versions, while Xen 4.6 to 4.16 are unpatched in the advisory.
via The Hacker News →