CyberArk: CVE Program partner

CVEs, 365 days05 all time, 0 rejected

Quality-median 99%

CVSS by the CNA-share of records

CWE-share of records

Affected versions-not n/a or unspecified

CVSS added by CISA-lower is better

Organisation	CyberArk Labs
Role	CNA
Type	Vendor, Researcher
Reports to	mitre
Scope	Vulnerabilities discovered by CyberArk Labs that are not in another CNA’s scope.
Advisories	https://labs.cyberark.com/cyberark-labs-security-advisories/

CVE-2025-9810 2025-09-01 · CVSS 6.8
TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on
CVE-2025-9809 2025-09-01 · CVSS 8.4
Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .
CVE-2025-8854 2025-08-11 · CVSS 8.4
Stack-based buffer overflow in LoadOFF in bulletphysics bullet3 before 3.26 on all platforms allows remote attackers to execute arbitrary code via a crafted OFF
CVE-2025-0518 2025-01-16 · CVSS 4.8
Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with p
CVE-2024-7701 2024-12-15 · CVSS 5.1
Use of Password Hash With Insufficient Computational Effort vulnerability in percona percona-toolkit allows Encryption Brute Forcing.This issue affects percona-

CyberArk