Warning: Multiple Severe Vulnerabilities in Xen Project, Patch Immediately!

Multiple serious vulnerabilities (18 CVEs) in the Xen Project Type-1 hypervisor have been disclosed, affecting filesystem drivers, guest configuration handling and other components and enabling cross-VM RAM disclosure, denial-of-service (host crashes), read-out-of-bounds and potential privilege escalation. The advisory warns that widely deployed Xen-based platforms (including Citrix/XenServer and XCP-ng) are affected, recommends priority patching and enhanced monitoring, and notes the absence of scoring/evidence of active exploitation at publication.