Vulnerabilities

Summary — last 7 days

New vulnerabilities2,683▼ 54 vs. last week

Critical / high1,442▲ 305 vs. last week

New active exploitation (KEV)7▼ 3 vs. last week

Unscored (no CVSS)64▼ 462 vs. last week

4 results, sorted by published date (most recent first)

CVE	Status	Severity	EPSS	Active exploitation	Affected technologies	Published ▼	Modified	Description
CVE-2024-37862	Deferred	High (7.3)	0.30%	—	Open Robotic Ros2^AI Open Robotic Navigation2^AI	12/5/2024	6/17/2026	Buffer Overflow vulnerability in Open Robotic Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2_planner process.
CVE-2024-37860	Deferred	High (7.3)	0.31%	—	Open Robotic Operating System Ros2^AI Open Robotic Operating System Navigation2^AI	12/5/2024	6/17/2026	Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2_amcl process
CVE-2024-30964	Deferred	High (7.8)	0.22%	—	Openrobotics Robotic Operating System 2^AI Openrobotics Navigation2^AI	12/5/2024	6/17/2026	Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the initial_pose_sub thread created by nav2_bt_navigator
CVE-2024-30963	Deferred	High (7.8)	0.23%	—	Openrobotics Robotic Operating System 2^AI Openrobotics Navigation2^AI	12/5/2024	6/17/2026	Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script.