{"metadata": {"vulnerability": "CVE-2026-102704", "count": 26, "kinds": {"milestone": 6, "sighting": 8, "kev": 0, "other": 12}}, "data": [{"timestamp": "2026-09-29T16:11:40.973Z", "date_only": false, "value": "2026-09-29T16:11:40.973Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-102704", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1447", "record": "CERTFR-2026-AVI-1447", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": true, "value": "2026-11-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1447", "record": "CERTFR-2026-AVI-1447", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-102704", "record": "UBUNTU-CVE-2026-102704", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1447", "record": "CERTFR-2026-AVI-1447", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-03T12:00:00Z", "date_only": false, "value": "2026-11-03T12:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / XEN", "record": "CVE-2026-102704", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-03T20:27:26.064Z", "date_only": false, "value": "2026-11-03T20:27:26.064212Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/baata5gc76y2k", "record": "CVE-2026-102704", "field": "creation_timestamp", "uuid": "97cf3d3f-33dd-4aa1-93b4-666dbc06b05b", "content": "Xen Security Advisory 523 v2 (CVE-2026-102703,CVE-2026-102704) - arbitrary read/write via grant copy", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/baata5gc76y2k"}, {"timestamp": "2026-11-04T03:17:07Z", "date_only": false, "value": "2026-11-04T03:17:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-102703", "record": "CVE-2026-102704", "field": "creation_timestamp", "uuid": "ec5bff10-a903-48cf-9cb1-97101dde6927", "url": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-102703"}, {"timestamp": "2026-11-04T03:17:07Z", "date_only": false, "value": "2026-11-04T03:17:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-102704", "record": "CVE-2026-102704", "field": "creation_timestamp", "uuid": "c155a92f-5297-4f8e-9be5-ff580b415853", "url": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-102704"}, {"timestamp": "2026-11-04T10:30:00.837Z", "date_only": false, "value": "2026-11-04T10:30:00.837Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-102704", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-04T10:30:00.837Z", "date_only": false, "value": "2026-11-04T10:30:00.837Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / XEN", "record": "CVE-2026-102704", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-04T10:34:39.953Z", "date_only": false, "value": "2026-11-04T10:34:39.953583Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117557721788946144", "record": "CVE-2026-102704", "field": "creation_timestamp", "uuid": "10798417-c217-4e2b-936d-42c2ba4e1a27", "content": "CVE-2026-102703 arbitrary read/write via grant copy [This CNA information record relates to multiple CVEs; thetext explains which aspects/vulnerabilities correspond to which CVE.]\nA common access pattern is a batch of Grant Copy operations acting onadjacent address ranges in the same source or destination page.  Forperformance reasons, Xen caches details internally to reuse alreadyvalidated data.  The conditions on when to re-validate the internal datawere not correct in some cases:\n - Frame numbers and grant references could wrongly be mixed up.  This   is CVE-2026-102703.\n - Copying by frame number (rather than grant reference) is permitted   only when operating on the caller's own memory.  The check to enforce   this restriction was misplaced.  This is CVE-2026-102704.\nhttps://www.cve.org/CVERecord?id=CVE-2026-102703https://xenbits.xenproject.org/xsa/advisory-523.html#Xen#CVE_2026_102703#bot", "url": "https://infosec.exchange/users/cve/statuses/117557721788946144"}, {"timestamp": "2026-11-04T10:35:20.210Z", "date_only": false, "value": "2026-11-04T10:35:20.210691Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117557724432545374", "record": "CVE-2026-102704", "field": "creation_timestamp", "uuid": "6f2f5d5f-27ce-475e-84cc-1b4a1f550cfd", "content": "CVE-2026-102704 arbitrary read/write via grant copy [This CNA information record relates to multiple CVEs; thetext explains which aspects/vulnerabilities correspond to which CVE.]\nA common access pattern is a batch of Grant Copy operations acting onadjacent address ranges in the same source or destination page.  Forperformance reasons, Xen caches details internally to reuse alreadyvalidated data.  The conditions on when to re-validate the internal datawere not correct in some cases:\n - Frame numbers and grant references could wrongly be mixed up.  This   is CVE-2026-102703.\n - Copying by frame number (rather than grant reference) is permitted   only when operating on the caller's own memory.  The check to enforce   this restriction was misplaced.  This is CVE-2026-102704.\nhttps://www.cve.org/CVERecord?id=CVE-2026-102704https://xenbits.xenproject.org/xsa/advisory-523.html#Xen#CVE_2026_102704#bot", "url": "https://infosec.exchange/users/cve/statuses/117557724432545374"}, {"timestamp": "2026-11-04T11:17:07Z", "date_only": false, "value": "2026-11-04T11:17:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5425-5QFW-CM7H", "record": "GHSA-5425-5QFW-CM7H", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-04T11:17:07.303Z", "date_only": false, "value": "2026-11-04T11:17:07.303", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102704", "record": "FKIE_CVE-2026-102704", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T12:31:30Z", "date_only": false, "value": "2026-11-04T12:31:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5425-5QFW-CM7H", "record": "GHSA-5425-5QFW-CM7H", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T15:32:41.551Z", "date_only": false, "value": "2026-11-04T15:32:41.551030Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/chuiho.net/post/3mziofh4j362z", "record": "CVE-2026-102704", "field": "creation_timestamp", "uuid": "0bd705a2-a658-498a-b093-4325fbdce8b7", "content": "\uff3b\u6ce8\u610f\uff3dXen \u306b\u6b20\u96652\u4ef6\uff08XSA-523\uff09\u3001\u60aa\u610f\u3042\u308b VM \u304c\u4ed6\u306e VM \u306e\u30e1\u30e2\u30ea\u3092\u8aad\u307f\u66f8\u304d\nXen \u30cf\u30a4\u30d1\u30fc\u30d0\u30a4\u30b6\u30fc\u306e grant copy \u306e\u6b20\u9665\uff08CVE-2026-102703\u3001CVE-2026-102704\uff09\u3002Xen 4.6 \u4ee5\u964d\u306e\u3059\u3079\u3066\u306e\u7248\u304c\u5bfe\u8c61\u3067\u3001\u52e7\u544a\u306b\u3088\u308b\u3068\u77e5\u3089\u308c\u3066\u3044\u308b\u56de\u907f\u7b56\u306f\u306a\u3044\u3002XCP-ng \u3068 Qubes OS \u306f\u4fee\u6b63\u7248\u3092\u51fa\u3057\u305f\u3002\nhttps://chuiho.net/posts/xen-xsa-523-grant-copy-guest-escape/ #Xen #\u4eee\u60f3\u5316", "url": "https://bsky.app/profile/chuiho.net/post/3mziofh4j362z"}, {"timestamp": "2026-11-04T18:26:11.558Z", "date_only": false, "value": "2026-11-04T18:26:11.558066Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-102704", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-11-04T18:26:11.558Z", "date_only": false, "value": "2026-11-04T18:26:11.558066Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102704", "record": "FKIE_CVE-2026-102704", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-04T18:26:16.031Z", "date_only": false, "value": "2026-11-04T18:26:16.031Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-102704", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-04T18:26:16.031Z", "date_only": false, "value": "2026-11-04T18:26:16.031Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-102704", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-04T21:32:26Z", "date_only": false, "value": "2026-11-04T21:32:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5425-5QFW-CM7H", "record": "GHSA-5425-5QFW-CM7H", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-05T05:21:09.802Z", "date_only": false, "value": "2026-11-05T05:21:09.802885Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mzk4ow4zs72a", "record": "CVE-2026-102704", "field": "creation_timestamp", "uuid": "69b69652-6864-4450-80d4-7aa451c46842", "content": "Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory (CVE-2026-102703 and CVE-2026-102704) #patchmanagement", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mzk4ow4zs72a"}, {"timestamp": "2026-11-05T08:15:08Z", "date_only": false, "value": "2026-11-05T08:15:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Russian_OSINT/8160", "record": "CVE-2026-102704", "field": "creation_timestamp", "uuid": "fcf93af8-75a6-4367-a09f-02c08d46b44c", "content": "\ud83c\ude01 Claude \u043f\u043e\u043c\u043e\u0433 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Xen, \u043d\u0430\u0440\u0443\u0448\u0430\u044e\u0449\u0438\u0435 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\n\n3 \u043d\u043e\u044f\u0431\u0440\u044f Xen Project \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2026-102703 \u0438 CVE-2026-102704) \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 Grant Copy. \u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u043c\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443, \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0445 \u0412\u041c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0434\u043e\u043c\u0435\u043d Dom0.\n\n\u25aa\ufe0f\u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Xen \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 4.6. \u0418\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0440 \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\u25aa\ufe0f\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Anthropic \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Claude. \u041d\u0430\u0445\u043e\u0434\u043a\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u0421\u0442\u0435\u0444\u0430\u043d \u041b\u0438\u043f\u043f \u0438\u0437 Ada Logics, \u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 CodeAnt \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0442\u0435\u0445 \u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445.\n\u25aa\ufe0fQubes OS \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0441\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 Xen 4.19.6-3 \u0434\u043b\u044f Qubes 4.3 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435. \u041f\u043e\u0441\u043b\u0435 \u0435\u0433\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a Dom0.\n\n\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c Xen \u043d\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442.\n\n\u270b @Russian_OSINT", "url": "https://t.me/Russian_OSINT/8160"}, {"timestamp": "2026-11-05T22:27:28Z", "date_only": false, "value": "2026-11-05T22:27:28Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-102704", "record": "UBUNTU-CVE-2026-102704", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-06T19:36:46.543Z", "date_only": false, "value": "2026-11-06T19:36:46.543", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102704", "record": "FKIE_CVE-2026-102704", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T09:06:14.805Z", "anchors": {"origin": {"timestamp": "2026-11-03T00:00:00Z", "date_only": true, "value": "2026-11-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1447", "record": "CERTFR-2026-AVI-1447", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-03T00:00:00Z", "date_only": true, "value": "2026-11-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1447", "record": "CERTFR-2026-AVI-1447", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 464774.805697, "hours": 129.1041126936111, "days": 5.379338028900463, "min_seconds": 378374.805697, "max_seconds": 464774.805697, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-03T00:00:00Z", "date_only": true, "value": "2026-11-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1447", "record": "CERTFR-2026-AVI-1447", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T09:06:14.805Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}