VULNERABILITY INTELLIGENCE

CVE-2016-7154

CVSS score7.2 HIGH

EPSS probability0.50%

CISA KEVNot currently listed

Published2016-09-21

Last modified2026-06-17

Description

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.