Known vulnerabilities in National Security Agency Ghidra

Website: https://www.nsa.gov/
Total Security Bulletins: 12

Security bulletins (12)

Secuity bulletin Severity Status Published
SB2026051604: Path traversal in Ghidra Debugger ISF server Medium
Not patched
16.05.2026
SB20260515104: Multiple vulnerabilities in Ghidra High
Patched
15.05.2026
SB20260425202: Multiple vulnerabilities in Ghidra High
Patched
25.04.2026
SB2026020405: Path traversal in Ghidra High
Patched
04.02.2026
SB2024091970: Use-after-free in Ghidra Low
Patched
19.09.2024
SB2023021401: OS command injection in Ghidra Medium
Patched
14.02.2023
SB2022012704: Remote code execution in NSA Ghidra (Apache Log4j component) Medium
Patched
27.01.2022
SB2021122211: Ghidra update for Apache Log4j Medium
Patched
22.12.2021
SB2021121314: Remote code execution in Ghidra (Apache Log4j component) Critical
Patched Exploited
13.12.2021
SB2019101609: Insecure DLL loading in NSA Ghidra Low
Patched
16.10.2019
SB2019093006: Multiple vulnerabilities in NSA Ghidra Medium
Patched Public exploit
30.09.2019
SB2019071715: XXE in NSA Ghidra Low
Patched
17.07.2019