CVSS 3.0
8.6 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NCVE-2015-8555
High (8.6). EPSS 2.3% chance of exploitation in the next 30 days.
Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.
Severity
- EPSS
- 2.3% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- citrix:xenserver
- xen:xen