CVE-2025-27465

Certain instructions need intercepting and emulating by Xen. In some cases Xen emulates the instruction by replaying it, using an executable stub. Some instructions may raise an exception, which is supposed to be handled gracefully. Certain replayed instructions have additional logic to set up and recover the changes to the arithmetic flags. For replayed instructions where the flags recovery logic is used, the metadata for exception handling was incorrect, preventing Xen from handling the the exception gracefully, treating it as fatal instead.

• CWE-755

• https://xenbits.xenproject.org/xsa/advisory-470.htmlPatch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2025/07/01/1Mailing List, Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-470.htmlPatch, Vendor Advisory

Published

Jul 16, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-2746An authentication bypass vulnerability in Kentico Xperience …9.8
• CVE-2025-27460The hard drives of the device are not encrypted using a full…6.8
• CVE-2025-27461During startup, the device automatically logs in the EPC2 Wi…6.8
• CVE-2025-27462[This CNA information record relates to multiple CVEs; the t…9.4
• CVE-2025-27463[This CNA information record relates to multiple CVEs; the t…9.4
• CVE-2025-27464[This CNA information record relates to multiple CVEs; the t…9.4
• CVE-2025-27466[This CNA information record relates to multiple CVEs; the t…9.8
• CVE-2025-27467Use after free in Windows Digital Media allows an authorized…7.8
• CVE-2025-27468Improper privilege management in Windows Secure Kernel Mode …7
• CVE-2025-27469Uncontrolled resource consumption in Windows LDAP - Lightwei…7.5
• CVE-2025-2747An authentication bypass vulnerability in Kentico Xperience …9.8
• CVE-2025-27470Uncontrolled resource consumption in Windows Standards-Based…7.5