MU
Product
Mumble
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add Mumble to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-27229 | 8.8 | Feb 16 | Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text Affected: before 1.3.4 |
| CVE-2020-13962 | 7.5 | Jun 9 | Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket… Affected: 1.3.0 |
| CVE-2018-20743 | 7.5 | Jan 25 | murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of… Affected: through 1.2.19 |
| CVE-2010-2490 | 6.5 | Oct 31 | Mumble: murmur-server has DoS due to malformed client query Affected: All versions, or not specified |
| CVE-2025-71264 | 5.3 | Mar 16 | Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash) Affected: before 1.6.870 |
| CVE-2014-3756 | – | Nov 16 | The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service (hang and resource consumption) via a… Affected: 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.3; 1.2.3; +5 more |
| CVE-2014-3755 | – | Nov 16 | The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resource consumption) via a local file… Affected: through 1.2.5; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.3; +5 more |
| CVE-2012-0863 | – | Apr 30 | Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext… Affected: through 1.2.3; 1.2.0; 1.2.2 |
Showing 8