Overview 24 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
24matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
4.2%
Not applicable
23
95.8%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
24
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
4
16.7%
Forecast only
0
0.0%
No public exploit
20
83.3%
split by
peak 7 / quarter
Q1 221
Not applicable1
Medium1
not blocked1
No public exploit1
Q2 222
Not applicable2
Medium2
not blocked2
Proof of concept only1
No public exploit1
Q3 220
Q4 220
Q1 231
Not applicable1
Medium1
not blocked1
Proof of concept only1
Q2 231
Not applicable1
Medium1
not blocked1
Proof of concept only1
Q3 230
Q4 231
Not applicable1
Medium1
not blocked1
No public exploit1
Q1 240
Q2 240
Q3 240
Q4 247
Not applicable7
Medium7
not blocked7
No public exploit7
Q1 253
Not applicable3
Medium3
not blocked3
No public exploit3
Q2 253
Not applicable3
Medium3
not blocked3
No public exploit3
Q3 250
Q4 250
Q1 263
Outside Waratek scope1
Not applicable2
Medium3
not blocked3
Proof of concept only1
No public exploit2
Q2 261
Not applicable1
Medium1
not blocked1
No public exploit1
Q3 261
Not applicable1
Medium1
not blocked1
No public exploit1
Q1 22Q3 22Q1 23Q3 23Q1 24Q3 24Q1 25Q3 25Q1 26Q3 26
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-31912 | Medium | 2026-09-05 | Not applicable | No public exploit | libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading the OS process memory in the 32GiB around the buffer on 64-bit architectures and in the entire address space on 32-bit architectures. |
| CVE-2026-34193 | Medium | 2026-06-01 | Not applicable | No public exploit | Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended GPU memory. A logic error in the address translation allowed a compromised Host (Kernel) to perform arbitrary writes to firmware memory. |
| CVE-2025-33215 | Medium | 2026-03-24 | Not applicable | No public exploit | NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointer offset by sending crafted messages. A successful exploit of this vulnerability may lead to a denial of service of the DPA and impact the availability of storage to other VMs. |
| CVE-2026-20022 | Medium | 2026-03-04 | Outside Waratek scope | No public exploit | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition when OSPF canonicalization debug is enabled by using the command debug ip ospf canon. This vulnerability is due to insufficient input validation when processing OSPF LSU packets. An attacker could exploit this vulnerability by sending crafted unauthenticated OSPF packets. A successful exploit could allow the attacker to write to memory outside of the packet data, causing the device to reload, resulting in a DoS condition. |
| CVE-2026-23764 | Medium | 2026-01-22 | Not applicable | Proof of concept only | VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively), as well as VB-Audio Matrix and Matrix Coconut (versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively), contain a vulnerability in their virtual audio drivers (vbvoicemeetervaio64*.sys, vbmatrixvaio64*.sys, vbaudio_vmauxvaio*.sys, vbaudio_vmvaio*.sys, and vbaudio_vmvaio3*.sys). The drivers allocate non-paged pool and map it into user space, where a length value associated with the allocation is exposed and can be modified by an unprivileged local attacker. On subsequent IOCTL handling, the corrupted length is used directly as the IoAllocateMdl length argument without adequate integrity checks before building and mapping the MDL, which can cause a kernel crash (BSoD), typically PAGE_FAULT_IN_NONPAGED_AREA. This flaw allows a local user to trigger a denial-of-service on affected Windows systems. |
| CVE-2024-53017 | Medium | 2025-06-03 | Not applicable | No public exploit | Memory corruption while handling test pattern generator IOCTL command. |
| CVE-2025-46806 | Medium | 2025-06-02 | Not applicable | No public exploit | A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4. |
| CVE-2024-47893 | Medium | 2025-05-17 | Not applicable | No public exploit | Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to read and/or write data outside the Guest's virtualised GPU memory. |
| CVE-2024-52937 | Medium | 2025-01-13 | Not applicable | No public exploit | Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory. |
| CVE-2024-52936 | Medium | 2025-01-13 | Not applicable | No public exploit | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to write data outside the Guest's virtualised GPU memory. |
| CVE-2024-52935 | Medium | 2025-01-13 | Not applicable | No public exploit | Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory. |
| CVE-2024-33036 | Medium | 2024-12-02 | Not applicable | No public exploit | Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access. |
| CVE-2024-42391 | Medium | 2024-11-18 | Not applicable | No public exploit | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space. |
| CVE-2024-42390 | Medium | 2024-11-18 | Not applicable | No public exploit | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space. |
| CVE-2024-42389 | Medium | 2024-11-18 | Not applicable | No public exploit | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space. |
| CVE-2024-42388 | Medium | 2024-11-18 | Not applicable | No public exploit | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space. |
| CVE-2024-42387 | Medium | 2024-11-18 | Not applicable | No public exploit | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space. |
| CVE-2024-23377 | Medium | 2024-11-04 | Not applicable | No public exploit | Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver. |
| CVE-2023-6560 | Medium | 2023-12-09 | Not applicable | No public exploit | An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel. This issue could allow a local user to crash the system. |
| CVE-2023-2426 | Medium | 2023-04-29 | Not applicable | Proof of concept only | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499. |
| CVE-2022-43665 | Medium | 2023-02-02 | Not applicable | Proof of concept only | A denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can lead to killing target process. An attacker can provide a malicious file to trigger this vulnerability. |
| CVE-2022-21147 | Medium | 2022-05-12 | Not applicable | Proof of concept only | An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerability to cause denial of service and termination of malware scan. An attacker can provide a malicious file to trigger this vulnerability. |
| CVE-2022-1420 | Medium | 2022-04-21 | Not applicable | No public exploit | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774. |
| CVE-2022-0614 | Medium | 2022-02-16 | Not applicable | No public exploit | Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2. |