CVE-2016-9382

CVE-2016-9382 describes a privilege escalation and denial-of-service vulnerability affecting Xen versions 4.0.x through 4.7.x, including Citrix XenServer. It arises from improper handling of x86 task switches to VM86 mode, allowing local 32-bit x86 HVM guest OS users to exploit it. With a CVSSv3 score of 7.8 (High), this vulnerability has a local attack vector and low attack complexity, potentially leading to full compromise (confidentiality, integrity, availability) of the guest OS. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.