Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

2101 matches found

CVE
CVE•added 2026/02/24 9:31 p.m.•13 views

CVE-2026-27572

Wasmtime (WebAssembly runtime) is affected by CVE-2026-27572 in the wasi:http/types.fields implementation. Prior to patched releases (Wasmtime 24.0.6, 36.0.6, 40.0.4, 41.0.4, and 42.0.0), the wasmtime-wasi-http crate uses a data structure that panics when the headers field set becomes excessively...

7.5CVSS5.5AI score0.00466EPSS
Exploits0References7Affected Software1
ATTACKERKB
ATTACKERKB•added 2026/02/24 9:23 p.m.•3 views

CVE-2026-27204

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of WASI host interfaces are susceptible to guest-controlled resource exhaustion on the host. Wasmtime did not appropriately place limits on resource allocations requested...

6.9CVSS5.8AI score0.00345EPSS
Exploits0References8Affected Software1
CVE
CVE•added 2026/02/24 9:23 p.m.•16 views

CVE-2026-27204

CVE-2026-27204 involves Wasmtime’s WASI host interfaces, where guest code could exhaust host resources due to insufficient limits on resource allocations. Affected versions prior to fixes include 24.0.6, 36.0.6, 40.0.4, 41.0.4, and 42.0.0. The fixes are released in Wasmtime 24.0.6, 36.0.6, 40.0.4...

6.9CVSS5.4AI score0.00345EPSS
Exploits0References7Affected Software1
Vulnrichment
Vulnrichment•added 2026/02/24 9:23 p.m.•3 views

CVE-2026-27204 Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of WASI host interfaces are susceptible to guest-controlled resource exhaustion on the host. Wasmtime did not appropriately place limits on resource allocations requested...

6.9CVSS5.9AI score0.00345EPSS
Exploits0References7
OSV
OSV•added 2026/02/24 9:23 p.m.•6 views

CVE-2026-27204 Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of WASI host interfaces are susceptible to guest-controlled resource exhaustion on the host. Wasmtime did not appropriately place limits on resource allocations requested...

6.9CVSS5.5AI score0.00345EPSS
Exploits0References9
OSV
OSV•added 2026/02/24 8:47 p.m.•3 views

GHSA-852M-CVVP-9P4W Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion

Impact Wasmtime's implementation of WASI host interfaces are susceptible to guest-controlled resource exhaustion on the host. Wasmtime did not appropriately place limits on resource allocations requested by the guests. This serves as a Denial of Service vector where a guest can induce a range of...

5.9CVSS6.1AI score0.00345EPSS
Exploits0References10
OSV
OSV•added 2026/02/24 2:16 p.m.•2 views

CVE-2026-2801

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox 148 and Thunderbird 148...

7.5CVSS5.8AI score
Exploits0References3
OSV
OSV•added 2026/02/24 2:16 p.m.•2 views

CVE-2026-2796

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability affects Firefox 148 and Thunderbird 148...

9.8CVSS5.8AI score
Exploits0References3
OSV
OSV•added 2026/02/24 2:16 p.m.•1 views

CVE-2026-2804

Use-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox 148 and Thunderbird 148...

5.4CVSS5.8AI score
Exploits0References3
NVD
NVD•added 2026/02/24 2:16 p.m.•6 views

CVE-2026-2796

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

9.8CVSS0.00757EPSS
Exploits2References3
NVD
NVD•added 2026/02/24 2:16 p.m.•4 views

CVE-2026-2804

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

5.4CVSS0.0034EPSS
Exploits0References3
NVD
NVD•added 2026/02/24 2:16 p.m.•3 views

CVE-2026-2801

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

7.5CVSS0.00288EPSS
Exploits0References3
NVD
NVD•added 2026/02/24 2:16 p.m.•5 views

CVE-2026-2767

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

9.8CVSS0.00292EPSS
Exploits0References5
OSV
OSV•added 2026/02/24 2:16 p.m.•2 views

CVE-2026-2767

Use-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

9.8CVSS5.8AI score
Exploits0References5
UbuntuCve
UbuntuCve•added 2026/02/24 2:16 p.m.•3 views

CVE-2026-2804

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

5.4CVSS5.8AI score0.0034EPSS
Exploits0References5
UbuntuCve
UbuntuCve•added 2026/02/24 2:16 p.m.•1 views

CVE-2026-2801

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

7.5CVSS5.8AI score0.00288EPSS
Exploits0References5
UbuntuCve
UbuntuCve•added 2026/02/24 2:16 p.m.•2 views

CVE-2026-2796

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

9.8CVSS7.5AI score0.00757EPSS
Exploits2References5
UbuntuCve
UbuntuCve•added 2026/02/24 2:16 p.m.•3 views

CVE-2026-2767

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

9.8CVSS5.8AI score0.00292EPSS
Exploits0References8
OSV
OSV•added 2026/02/24 2:16 p.m.•2 views

UBUNTU-CVE-2026-2801

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

7.5CVSS5.8AI score0.00288EPSS
Exploits0References6
OSV
OSV•added 2026/02/24 2:16 p.m.•2 views

UBUNTU-CVE-2026-2796

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...

9.8CVSS7.5AI score0.00757EPSS
Exploits2References6
Rows per page
Query Builder