CVE-2025-27466

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference TSC area. This is CVE-2025-27466. 2. A NULL pointer dereference by assuming the SIM page is mapped when a synthetic timer message has to be delivered. This is CVE-2025-58142. 3. A race in the mapping of the reference TSC page, where a guest can get Xen to free a page while still present in the guest physical to machine (p2m) page tables. This is CVE-2025-58143.

• CWE-395

• https://xenbits.xenproject.org/xsa/advisory-472.htmlVendor Advisory
• http://www.openwall.com/lists/oss-security/2025/09/09/1
• http://xenbits.xen.org/xsa/advisory-472.html

Published

Sep 11, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-27460The hard drives of the device are not encrypted using a full…6.8
• CVE-2025-27461During startup, the device automatically logs in the EPC2 Wi…6.8
• CVE-2025-27462[This CNA information record relates to multiple CVEs; the t…9.4
• CVE-2025-27463[This CNA information record relates to multiple CVEs; the t…9.4
• CVE-2025-27464[This CNA information record relates to multiple CVEs; the t…9.4
• CVE-2025-27465Certain instructions need intercepting and emulating by Xen.…4.3
• CVE-2025-27467Use after free in Windows Digital Media allows an authorized…7.8
• CVE-2025-27468Improper privilege management in Windows Secure Kernel Mode …7
• CVE-2025-27469Uncontrolled resource consumption in Windows LDAP - Lightwei…7.5
• CVE-2025-2747An authentication bypass vulnerability in Kentico Xperience …9.8
• CVE-2025-27470Uncontrolled resource consumption in Windows Standards-Based…7.5
• CVE-2025-27471Sensitive data storage in improperly locked memory in Micros…5.9