CVE-2026-102703

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches details internally to reuse already validated data. The conditions on when to re-validate the internal data were not correct in some cases: - Frame numbers and grant references could wrongly be mixed up. This is CVE-2026-102703. - Copying by frame number (rather than grant reference) is permitted only when operating on the caller's own memory. The check to enforce this restriction was misplaced. This is CVE-2026-102704.

• CWE-704

• https://xenbits.xenproject.org/xsa/advisory-523.html

Published

Nov 4, 2026

Last Modified

Nov 6, 2026

Status

Undergoing Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102695OmniFaces is a utility library for Faces. In OmniFaces versi…8.2
• CVE-2026-102697Ollama versions 0.14.0 before 0.31.2 contain an incorrect au…7.8
• CVE-2026-102699[This CNA information record relates to multiple CVEs; the t…7.5
• CVE-2026-10270A vulnerability was detected in D-Link DI-7001 MINI up to 19…7.5
• CVE-2026-102700With its original introduction, GNTTAB_cache_flush was made …4.7
• CVE-2026-102702[This CNA information record relates to multiple CVEs; the t…7.5
• CVE-2026-102704[This CNA information record relates to multiple CVEs; the t…4.4
• CVE-2026-102709In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the …8.4
• CVE-2026-10271A flaw has been found in a4m4 Student-Management-System up t…6.3
• CVE-2026-102710In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, buil…8.5
• CVE-2026-102711In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the …6.9
• CVE-2026-102712In Eclipse ThreadX NetX Duo versions up to and including 6.5…6.3