Vulnerabilities
Summary — last 7 days
New vulnerabilities4,948▲ 39 vs. last week
Critical / high2,111▼ 666 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)757▲ 649 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Undergoing Analysis | Critical (9.1) | 0.60% | — | Apache DatasketchesAI | 10/10/2026 | 10/16/2026 | Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap() read header fields before checking that the input was long enough. For the compressed format, the size check could be defeated… | |
| Undergoing Analysis | Critical (9.8) | 0.39% | — | Apache Datasketches CPPAI | 10/10/2026 | 10/16/2026 | Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). A crafted serialized CPC sketch passed to cpc_sketch::deserialize(), from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, because the read… | |
| Undergoing Analysis | Critical (9.8) | 0.66% | — | Apache DatasketchesAI | 10/10/2026 | 10/16/2026 | Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). When deserializing a sketch in LIST mode, from either a byte buffer or a stream, the coupon count was read from the input and used as the number of entries to copy into a fixed buffer of 8 entries, without… |