CVE Program partner
WindRiver
Wind River Systems Inc.
CVEs, 365 days58 all time, 0 rejected
Quality93%median 99%
CVSS by the CNA100%share of records
CWE80%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
| Organisation | Wind River Systems Inc. |
| Role | CNA |
| Type | Vendor |
| Reports to | icscert → CISA |
| Scope | All Wind River branded products as found on <a href='https://windriver.com' target='_blank'>windriver.com</a> including vulnerabilities in natively developed or modified product incorporated components, and only product incorporated third-party components not in another CNA’s scope. |
| Advisories | https://www.windriver.com/security/vulnerability-responses |
Latest CVEs · RSS
- CVE-2026-104018 2026-10-01 · CVSS 8.8An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privile
- CVE-2026-102006 2026-09-28 · CVSS 5.5In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kern
- CVE-2026-102005 2026-09-28 · CVSS 5.5Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causi
- CVE-2026-102004 2026-09-28 · CVSS 7.8Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.
- CVE-2026-97686 2026-09-28 · CVSS 5.5Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and sy
- CVE-2025-26503 2025-09-18 · CVSS 6.7A crafted system call argument can cause memory corruption.
- CVE-2025-26499 2025-09-11 · CVSS 6.0Under heavy system utilization a random race condition can occur during authentication or token refresh operation. This flaw allows one user to be granted a tok
- CVE-2025-26500 2025-03-21 · CVSS 4.6: Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation. Specifically crafted USB packets ma