CVE-2025-58142

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference TSC area. This is CVE-2025-27466. 2. A NULL pointer dereference by assuming the SIM page is mapped when a synthetic timer message has to be delivered. This is CVE-2025-58142. 3. A race in the mapping of the reference TSC page, where a guest can get Xen to free a page while still present in the guest physical to machine (p2m) page tables. This is CVE-2025-58143.

• CWE-395

• https://xenbits.xenproject.org/xsa/advisory-472.htmlVendor Advisory
• http://www.openwall.com/lists/oss-security/2025/09/09/1
• http://xenbits.xen.org/xsa/advisory-472.html

Published

Sep 11, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-58133Authentication bypass in some Zoom Rooms Clients before vers…7.5
• CVE-2025-58134Incorrect authorization in certain Zoom Workplace Clients fo…4.3
• CVE-2025-58135Improper action enforcement in certain Zoom Workplace Client…6.5
• CVE-2025-58136A bug in POST request handling causes a crash under a certai…7.5
• CVE-2025-58137Authorization Bypass Through User-Controlled Key vulnerabili…8.1
• CVE-2025-5814The Profiler – What Slowing Down Your WP plugin for WordPres…5.3
• CVE-2025-58143[This CNA information record relates to multiple CVEs; the t…9.8
• CVE-2025-58144[This CNA information record relates to multiple CVEs; the t…7.5
• CVE-2025-58145[This CNA information record relates to multiple CVEs; the t…7.5
• CVE-2025-58146There are multiple issues. 1. Updates to the XAPI database…9.4
• CVE-2025-58147[This CNA information record relates to multiple CVEs; the t…7.5
• CVE-2025-58148[This CNA information record relates to multiple CVEs; the t…7.5