Known vulnerabilities in VxWorks

Vendor: Wind River Systems, Inc.
Software: VxWorks
Software CPE: cpe:2.3:o:wind_river_systems:vxworks:*:*:*:*:*:*:*:*
Website: https://www.windriver.com/
Total vulnerabilities: 24
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VxWorks VxWorks is affected by 24 known vulnerabilities: 10 high, 5 medium, 9 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75043 - Out-of-bounds write
CVE-2020-28895		 CWE-787 High
No
No
 6.9.4.12 RCPL3, 21.03 12.04.2023 SB2021020342
SB2023041257
#VU73707 - Improper input validation
CVE-2022-38767		 CWE-20 Medium
No
No
 6.9.4.12 RCPL6, 22.09 15.03.2023 SB2023031516
SB2023031723
#VU62291 - Heap-based Buffer Overflow
CVE-2021-29998		 CWE-122 High
No
No
 6.5 13.04.2022 SB2021041371
SB2022041320
SB2022071403
#VU27381 - Double Free
CVE-2020-10647		 CWE-415 High
No
No
 6.9.4.12 RCPL1, 7 SR0640 28.04.2020 SB2020042808
#VU34421 - NULL Pointer Dereference
CVE-2020-10664		 CWE-476 Medium
No
No
 - 27.04.2020 SB2020042728
#VU19588 - Missing release of memory after effective lifetime
CVE-2019-12265		 CWE-401 Low
No
Exploited
 - 31.07.2019 SB2019073103
SB2023111629
#VU19587 - Improper input validation
CVE-2019-12262		 CWE-20 Low
No
No
 - 31.07.2019 SB2019073103
SB2023111629
#VU19586 - NULL Pointer Dereference
CVE-2019-12259		 CWE-476 Low
No
No
 - 31.07.2019 SB2019073103
SB2023111629
#VU19585 - Expected Behavior Violation
CVE-2019-12264		 CWE-440 Low
No
No
 - 31.07.2019 SB2019073103
SB2024083018
#VU19584 - Improper input validation
CVE-2019-12258		 CWE-20 Low
Available
No
 - 31.07.2019 SB2019073103
SB2022110237
SB2023111629
#VU19583 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2019-12263		 CWE-362 Low
No
No
 - 31.07.2019 SB2019073103
SB2022110237
SB2023111629
#VU19582 - Memory corruption
CVE-2019-12261		 CWE-119 High
No
No
 - 31.07.2019 SB2019073103
SB2023111629
#VU19581 - Memory corruption
CVE-2019-12260		 CWE-119 High
No
No
 - 31.07.2019 SB2019073103
SB2020102701
SB2021072138
and 1 more
#VU19580 - Integer underflow
CVE-2019-12255		 CWE-191 High
Available
No
 - 31.07.2019 SB2019073103
SB2022110237
SB2023111629
#VU19579 - Heap-based Buffer Overflow
CVE-2019-12257		 CWE-122 Medium
No
No
 - 31.07.2019 SB2019073103
#VU19578 - Stack-based buffer overflow
CVE-2019-12256		 CWE-121 High
No
No
 - 31.07.2019 SB2019073103
SB2023111629
#VU35870 - Integer overflow
CVE-2019-9865		 CWE-190 High
No
No
 - 29.05.2019 SB2019052918
#VU39725 - Integer overflow
CVE-2015-7599		 CWE-190 High
No
No
 - 07.02.2017 SB2017020708
#VU42974 - Improper input validation
CVE-2013-0711		 CWE-20 Medium
No
No
 - 20.03.2013 SB2013032008
#VU42975 - Improper input validation
CVE-2013-0712		 CWE-20 Low
No
No
 - 20.03.2013 SB2013032009


Showing elements 1 - 20 out of 24