Latest
  1. Ireland’s government will not oppose Labour bill on AI sexual abuse images
  2. METR estimates Anthropic’s capabilities now improve at about twice its 2024 to 2025 pace
  3. Anthropic rolls out Personal Finance beta in Claude, with read-only bank access
  4. Baidu releases ERNIE-5.5-Flash-Base pre-training checkpoint on Hugging Face
  5. Parents sue Google, saying Gemini on a school Chromebook helped their daughter plan suicide
  6. Visa benchmark finds AI shopping agents fail 42.8% of runs
  7. OpenAI releases GPT-6 Cyber for approved security customers
  8. Google releases Gemini Omni 1.2 Flash with 15-second video clips

Latest / Chips, compute and energy

IncidentComputeFrontierInternationalConfirmed

Xen advisory credits Anthropic’s Claude with finding two flaws that let guests reach other VMs’ memory

See how this story connects

Source: Xen ProjectAlso reported by The Hacker News, Qubes OS

The Xen Project published security advisory XSA-523 on 3 November 2026, covering CVE-2026-102703 and CVE-2026-102704, which let a malicious guest read and write arbitrary memory belonging to other domains, including Dom0. The advisory says Anthropic discovered the flaws using Claude, Stephan Lipp of Ada Logics validated them, and the CodeAnt AI Security Research Team later reported them independently. All Xen versions from 4.6 onwards are vulnerable; there is no known mitigation, and patches are attached for xen-unstable and Xen 4.17.x to 4.19.x.

Why it matters

Operators of Xen 4.6 or later face guests that can read and write other domains’ memory, including Dom0, with no known mitigation until they apply the patches.

When
3 Nov 2026
ID
WTA-N-2026-0712
Who
Xen Project, Anthropic, Ada Logics, CodeAnt AI

Summary written with AI by wheresthe.ai, from Xen Project and the reporting credited above. Checked against the source on 4 Nov 2026.

Read the original at Xen Project

Source copy: saved on 4 Nov 2026 to check this story and not republished, because the text belongs to its publisher. Also held by the Internet Archive.

Next stop on this Storyline: What happened nextIndia’s CERT-In names Crafty Falcon group using AI tools against financial firms

Cite this story

WTA-N-2026-0712: “Xen advisory credits Anthropic’s Claude with finding two flaws that let guests reach other VMs’ memory.” wheresthe.ai, 3 Nov 2026. https://wheresthe.ai/d/intl-xen-advisory-credits-claude-with-two-guest-memory-flaws-2026-11/ (source: Xen Project).

Spotted an error? Email [email protected].