CVE-2016-7093

Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.

• CWE-264

• http://support.citrix.com/article/CTX216071Third Party Advisory
• http://www.securityfocus.com/bid/92865
• http://www.securitytracker.com/id/1036752Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-186.htmlPatch, Vendor Advisory
• http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patchPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201611-09
• http://support.citrix.com/article/CTX216071Third Party Advisory
• http://www.securityfocus.com/bid/92865
• http://www.securitytracker.com/id/1036752Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-186.htmlPatch, Vendor Advisory
• http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patchPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201611-09

Published

Sep 21, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7086The installer in VMware Workstation Pro 12.x before 12.5.0 a…
• CVE-2016-7087Directory traversal vulnerability in the Connection Server i…
• CVE-2016-7089WatchGuard RapidStream appliances allow local users to gain …
• CVE-2016-7090The integrated web server on Siemens SCALANCE M-800 and S615…
• CVE-2016-7091sudo: It was discovered that the default sudo configuration …
• CVE-2016-7092The get_page_from_l3e function in arch/x86/mm.c in Xen allow…
• CVE-2016-7094Buffer overflow in Xen 4.7.x and earlier allows local x86 HV…
• CVE-2016-7095Exponent CMS before 2.3.9 is vulnerable to an attacker uploa…
• CVE-2016-7097The filesystem implementation in the Linux kernel through 4.…
• CVE-2016-7098Race condition in wget 1.17 and earlier, when used in recurs…
• CVE-2016-7099The tls.checkServerIdentity function in Node.js 0.10.x befor…
• CVE-2016-7101The SGI coder in ImageMagick before 7.0.2-10 allows remote a…6.5