{"id":"CVE-2026-62428","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-62428","generatedAt":"2026-10-28T03:39:39.113Z","title":"When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy).","description":"When grant-copy operations are processed, the respective grant may or may\nnot already be in use by another operation (a mapping or another copy).\nFor all copy operations the referenced guest frame is looked up.  When\nanother operation is already active for the grant (the grant is \"pinned\"),\nwhat is being supplied back to actually carry out permission checks and\ncopy operation may not be consistent: The permission check may be carried\nout on a page different from the one involved in the copy.","published":"2026-07-28T13:19:02.000Z","lastModified":"2026-07-28T17:16:54.000Z","status":"Deferred","sourceIdentifier":"security@xen.org","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"},"cwe":["CWE-367"],"affected":[],"epss":{"score":0.00115,"percentile":0.01548,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.11%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-500.html","source":"security@xen.org"},{"url":"http://www.openwall.com/lists/oss-security/2026/07/28/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenbits.xen.org/xsa/advisory-500.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-62428","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}