XSA-523 has no mitigation: it has a host reboot
The Xen advisory of 3 November says a malicious guest can read and write arbitrary memory belonging to other domains, including Dom0, and its mitigation section contains five words: "There is no known mitigation". The patch requires a host reboot. We counted Xen advisories year by year over the official JSON — 47 published in 2026 against 10 in all of 2025 — and go through why the grant tables are this year's hot spot, and what gets decided before the next advisory lands, which already has a date: 10 November, 18:00 UTC.
Microsoft 365
ES 
CAT 
EN