Login Request a demo
ZE
Product
zephyr
by zephyrproject-rtos · last CVE Jun 25, 2026
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities29In the news0Timeline
Severity mix
Critical 3High 14Medium 12Low 0
Severity
All severities29Critical3High14Medium12Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add zephyr to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-0849
6.8
0%
Mar 14
crypto: ATAES132A response length allows stack buffer overflow
Affected: before 4.4.0
CVE-2026-5072
6.5
0%
May 22
ptp: Potential Denial of Service via PTP Interval Shift
Affected: before 4.3.1
CVE-2025-12899
6.5
0%
Jan 30
net: icmp: Out of bound memory read
Affected: before 3.7.2; 4.0.0 before 4.2.2
CVE-2025-12035
6.5
0%
Dec 15
Bluetooth: Integer Overflow in Bluetooth Classic (BR/EDR) L2CAP
Affected: before 4.3.0
CVE-2025-12890
6.5
0%
Nov 7
Bluetooth: peripheral: Invalid handling of malformed connection request
Affected: before 4.2.0
CVE-2025-10456
6.5
0%
Sep 19
Bluetooth: Semi-Arbitrary ability to make the BLE Target send disconnection requests
Affected: before 3.7.2; 4.0.0 before 4.3.0
CVE-2025-7403
6.5
0%
Sep 19
Bluetooth: bt_conn_tx_processor unsafe handling
Affected: before 4.2.0
CVE-2026-5589
6.3
0%
Jun 4
Out-of-bounds write caused by an integer underflow in the Bluetooth Mesh subsystem.
Affected: before 4.3.1
CVE-2026-1681
6.1
0%
May 12
net: Stack Overflow with Ping (to own IP Address) via Shell
Affected: before 4.4.0
CVE-2026-4179
6.1
0%
Mar 14
stm32: usb: Infinite while loop in Interrupt Handler
Affected: before 3.7.2; 4.0.0 before 4.2.2; 4.3.0 before 4.3.1
CVE-2026-1677
5.3
0%
May 11
net: TLS 1.2 connections allowed on TLS 1.3 sockets
Affected: before 4.4.0
CVE-2026-5590
5.3
0%
Apr 5
net: ip/tcp: Null pointer dereference can be triggered by a race condition
Affected: before 4.3.1
Showing 12