Known vulnerabilities in NetBSD

Software: NetBSD
Software CPE: cpe:2.3:o:netbsd_foundation:netbsd:*:*:*:*:*:*:*:*
Total vulnerabilities: 77
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NetBSD NetBSD is affected by 77 known vulnerabilities: 1 critical, 4 high, 22 medium, 50 low Critical High Medium Low

Vulnerabilities (77)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Available
No
- 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU87316 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CWE-451 Low
No
No
- 11.03.2024 SB2024031102
#VU83295 - Missing Authorization
CVE-2023-45198
CWE-862 Medium
No
No
- 20.11.2023 SB2023112030
#VU77772 - Incorrect Default Permissions
CWE-276 Low
No
No
- 28.06.2023 SB2023062846
#VU77771 - Missing release of memory after effective lifetime
CWE-401 Low
No
No
- 28.06.2023 SB2023062846
#VU77770 - Out-of-bounds read
CWE-125 Low
No
No
- 28.06.2023 SB2023062846
#VU77769 - Memory corruption
CWE-119 Low
No
No
- 28.06.2023 SB2023062846
#VU77768 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
- 28.06.2023 SB2023062846
#VU77582 - Improper Authentication
CVE-2023-3326
CWE-287 Medium
No
No
- 21.06.2023 SB2023062111
SB2023062846
#VU67909 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-362 Low
No
No
- 04.10.2022 SB2022100441
#VU67908 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
- 04.10.2022 SB2022100441
#VU67907 - Use After Free
CWE-416 Low
No
No
- 04.10.2022 SB2022100441
#VU62920 - Memory corruption
CVE-2022-29867
CWE-119 Medium
No
No
- 10.05.2022 SB2022051006
#VU54876 - Incorrect Default Permissions
CWE-276 Low
No
No
- 14.07.2021 SB2021071427
#VU51432 - Use of Insufficiently Random Values
CWE-330 Medium
No
No
- 12.03.2021 SB2021031205
#VU47625 - Memory corruption
CWE-119 High
No
No
- 13.10.2020 SB2020101369
#VU24470 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
- 21.01.2020 SB2020012111
#VU23650 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
- 18.12.2019 SB2019121802
#VU22999 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CWE-338 Low
No
No
- 26.11.2019 SB2019112612
#VU18388 - Missing release of memory after effective lifetime
CWE-401 Low
No
No
- 03.05.2019 SB2019050304


Showing elements 1 - 20 out of 77