CVE-2026-79608

critical · 9.8

The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional was introduced, resulting in the workaround to not be applied when needed and vice versa. For more details, see: http://xenbits.xen.org/xsa/advisory-433.html

9.8

CVSS

0.4%

EPSS (exploit prob.)

28th

EPSS percentile

2026-10-13

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-670

References

https://xenbits.xenproject.org/xsa/advisory-515.html
http://xenbits.xen.org/xsa/advisory-515.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-79608