Vulnerabilities
Summary — last 7 days
New vulnerabilities4,976▲ 106 vs. last week
Critical / high2,098▼ 687 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)823▲ 761 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Undergoing Analysis | High (7.5) | 0.52% | — | Apache Datasketches CPPAI | 10/10/2026 | 10/16/2026 | Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_union::deserialize() read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes past the end of… | |
| Undergoing Analysis | Critical (9.8) | 0.39% | — | Apache Datasketches CPPAI | 10/10/2026 | 10/16/2026 | Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). A crafted serialized CPC sketch passed to cpc_sketch::deserialize(), from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, because the read… |