OS Strelets
3,078 CVEs tracked. 54 of them are in CISA KEV.
This hub aggregates every CVE we track for OS Strelets, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
OS Strelets CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 1 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 3,078 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical289
- High1,480
- Medium1,178
- Low131
Latest CVEs
The 15 most recently published vulnerabilities affecting OS Strelets.
- CVE-2019-15690LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c. An attacker sends cursor shapes with specially ...8.8
- CVE-2022-28733Integer underflow in grub_net_recv_ip4_packets8.1
- CVE-2023-27522Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting7.5
- CVE-2023-25690Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy9.8
- CVE-2022-37436Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting5.3
- CVE-2022-36760Apache HTTP Server: mod_proxy_ajp Possible request smuggling9.0
- CVE-2006-20001Apache HTTP Server: mod_dav out of bounds read, or write of zero byte7.5
- CVE-2022-0801Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS preventions via a crafted HTML page. (Chrome security severity: Medium)6.1
- CVE-2022-38478Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12. Some of these bugs showed evidence of memory corruption and we presume...8.8
- CVE-2022-38472An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar. This could have been used to fool the user int...6.5
- CVE-2022-38473A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as microphone or camera access). This vulnerability affects Thunderbird < 102.2, Thunderbird <...8.8
- CVE-2022-36319When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91...7.5
- CVE-2022-36318When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird...5.3
- CVE-2022-31740On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitable crash. This vulnerability affects Thunderbird < 91.1...8.8
- CVE-2022-31744An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy. This vulnerability affects Firefox ESR...6.5
Product grouping is registry-driven, with AI assist and human review. How it works