News
threat-intel Russian Hackers Create Fake US and UK Websites to Target Visitors With Mobile Exploits - GBHackers cybersecurity AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks - SecurityWeek threat-intel Google Patches Critical Android RCE Flaws That Let Attackers Execute Code Without User Interaction - GBHackers cybersecurity Google Fixes 208 Android Vulnerabilities, Including Critical Zero-Click RCE Flaws - CyberPress cybersecurity CISA flags WordPress RCE flaw as actively exploited in attacks - BleepingComputer cybersecurity Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads - The Hacker News threat-intel CISA Warns of Active Attacks Exploiting WordPress Core Code Execution Vulnerability - GBHackers threat-intel Hackers Use Stolen Microsoft Entra ID App Credentials to Breach 27 Organizations and Steal Sensitive Data - GBHackers cybersecurity Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory - The Hacker News threat-intel Cloudflare Launches Zero Wire to Track Critical Vulnerabilities and Active Exploitation Across the Internet - GBHackers threat-intel 3AM Ransomware Hackers Use AI-Assisted Attacks to Breach UK Schools and Spread Across Windows Domains - GBHackers cybersecurity China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor - The Hacker News cybersecurity mSecure Password Manager Warns Users to Reset Passwords, 2FA and Passkeys After Security Incident - CyberPress cybersecurity Hackers Use BeautyStealer Malware to Steal Browser Passwords and Sensitive Files Before Erasing Evidence - CyberPress cybersecurity APT29 Hackers Poison Websites to Target iPhones and Android Phones Without Users Clicking Anything - CyberPress
1 / 15
All news ›
Cybersecurity

Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory

The Hacker News ·

Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0. Dom0 is the VM that, by default, has full permissions and manages the others. Patches are out, and there is no known mitigation, the Xen Project said in an advisory on November 3. All Xen versions from 4.6 onward are vulnerable,

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.