Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2016-05-11	CVE-2016-3712	Integer Overflow or Wraparound vulnerability in multiple products Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode. local low complexity oracle qemu canonical debian redhat citrix CWE-190	5.5
2016-01-22	CVE-2016-1571	Code vulnerability in multiple products The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check. network high complexity citrix xen CWE-17	6.3