CVE-2018-7541

An issue was discovered in Xen through 4.10.x allowing guest OS users to cause a denial of service (hypervisor crash) or gain privileges by triggering a grant-table transition from v2 to v1.

• http://www.securityfocus.com/bid/103177
• http://www.securitytracker.com/id/1040775
• https://lists.debian.org/debian-lts-announce/2018/03/msg00003.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html
• https://security.gentoo.org/glsa/201810-06
• https://support.citrix.com/article/CTX232096
• https://support.citrix.com/article/CTX232655
• https://www.debian.org/security/2018/dsa-4131Third Party Advisory
• https://xenbits.xen.org/xsa/advisory-255.htmlVendor Advisory
• http://www.securityfocus.com/bid/103177
• http://www.securitytracker.com/id/1040775
• https://lists.debian.org/debian-lts-announce/2018/03/msg00003.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html
• https://security.gentoo.org/glsa/201810-06
• https://support.citrix.com/article/CTX232096
• https://support.citrix.com/article/CTX232655
• https://www.debian.org/security/2018/dsa-4131Third Party Advisory
• https://xenbits.xen.org/xsa/advisory-255.htmlVendor Advisory

Published

Feb 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7535An issue was discovered in TotalAV v4.1.7. An unprivileged u…
• CVE-2018-7536An issue was discovered in Django 2.0 before 2.0.3, 1.11 bef…
• CVE-2018-7537An issue was discovered in Django 2.0 before 2.0.3, 1.11 bef…
• CVE-2018-7538A SQL injection vulnerability in the tracker functionality o…
• CVE-2018-7539On Appear TV XC5000 and XC5100 devices with firmware 3.26.21…
• CVE-2018-7540An issue was discovered in Xen through 4.10.x allowing x86 P…
• CVE-2018-7542An issue was discovered in Xen 4.8.x through 4.10.x allowing…
• CVE-2018-7543Cross-site scripting (XSS) vulnerability in installer/build/…6.1
• CVE-2018-7544A cross-protocol scripting issue was discovered in the manag…
• CVE-2018-7546wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1…
• CVE-2018-7547lyadmin 1.x has XSS via the config[WEB_SITE_TITLE] parameter…4.8
• CVE-2018-7548In subst.c in zsh through 5.4.2, there is a NULL pointer der…