Vulnerabilities
Summary — last 7 days
New vulnerabilities4,976▲ 106 vs. last week
Critical / high2,098▼ 687 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)823▲ 761 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Undergoing Analysis | High (7.5) | 0.52% | — | Apache Datasketches CPPAI | 10/10/2026 | 10/16/2026 | Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_union::deserialize() read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes past the end of… | |
| Undergoing Analysis | Critical (9.1) | 0.60% | — | Apache DatasketchesAI | 10/10/2026 | 10/16/2026 | Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap() read header fields before checking that the input was long enough. For the compressed format, the size check could be defeated… | |
| Undergoing Analysis | Critical (9.8) | 0.39% | — | Apache Datasketches CPPAI | 10/10/2026 | 10/16/2026 | Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). A crafted serialized CPC sketch passed to cpc_sketch::deserialize(), from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, because the read… | |
| Undergoing Analysis | Critical (9.8) | 0.66% | — | Apache DatasketchesAI | 10/10/2026 | 10/16/2026 | Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). When deserializing a sketch in LIST mode, from either a byte buffer or a stream, the coupon count was read from the input and used as the number of entries to copy into a fixed buffer of 8 entries, without… |