Approved changes feed: RSS · Atom

cpe:2.3:a:xen:windows_pv_drivers:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorXen (f270236f-a538-5294-a46e-e4b9797d2f33)
ProductWindows Pv Drivers (86c457aa-3c8c-5c87-9343-1e7e7ac3f1e4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27464 vulnerable 2026-07-28 23:33:08.338111 WinPVDrivers: Excessive permissions on user-exposed devices
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose various facilities to userspace. Several of these have no security descriptor, and are therefore fully accessible to unprivileged users. These are: 1. XenCons, CVE-2025-27462 2. XenIface, CVE-2025-27463 3. XenBus, CVE-2025-27464
Published: 2026-07-09T14:35:38.440Z
Updated: 2026-07-09T16:07:40.763Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27463 vulnerable 2026-07-28 23:33:08.337805 WinPVDrivers: Excessive permissions on user-exposed devices
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose various facilities to userspace. Several of these have no security descriptor, and are therefore fully accessible to unprivileged users. These are: 1. XenCons, CVE-2025-27462 2. XenIface, CVE-2025-27463 3. XenBus, CVE-2025-27464
Published: 2026-07-09T14:29:49.625Z
Updated: 2026-07-09T15:52:14.394Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27462 vulnerable 2026-07-28 23:33:08.336000 WinPVDrivers: Excessive permissions on user-exposed devices
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose various facilities to userspace. Several of these have no security descriptor, and are therefore fully accessible to unprivileged users. These are: 1. XenCons, CVE-2025-27462 2. XenIface, CVE-2025-27463 3. XenBus, CVE-2025-27464
Published: 2026-07-09T14:27:03.467Z
Updated: 2026-07-09T16:06:58.873Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.