Anthropic: CVE Program partner

CVEs, 365 days55 all time, 0 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	Anthropic, PBC
Role	CNA
Type	Vendor, AI Researcher (Frontier AI Researcher CVE Numbering Authorities (CNAs) Pilot)
Reports to	mitre
Scope	<strong>CNA Scope:</strong> Vulnerabilities in software, services, and open-source projects developed, maintained, or distributed by Anthropic. This includes Claude Code, Claude Desktop, browser extensions, the Model Context Protocol (MCP) SDKs and reference servers, Anthropic API client SDKs, and related developer tooling published under the Anthropic, anthropic-experimental, and modelcontextprotocol GitHub organizations.<br/><br/><strong><a href='/Resources/Roles/Cnas/FrontierAiResearcherCNAsPilot.pdf' target='_blank'>Frontier AI Researcher CVE Numbering Authorities (CNAs) Pilot</a> Scope:</strong> Vulnerabilities discovered by Anthropic that are not within another CNA’s scope.
Advisories	https://trust.anthropic.com/resources#6a44049fd659a87d0068f0c5

CVE-2026-103658 2026-10-12 · CVSS 5.9
GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::re
CVE-2026-103435 2026-10-07 · CVSS 7.7
Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time with
CVE-2026-101283 2026-09-30 · CVSS 9.2
iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciph
CVE-2026-101276 2026-09-30 · CVSS 9.2
iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cance
CVE-2026-103012 2026-09-30 · CVSS 2.0
Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead of the user's valid

Anthropic