Login Request a demo
BY
Vendor
bytecodealliance
4 products with CVEs on record
79
CVEs
0
On KEV
19
New 30D
Products
WA
wasmtime
bytecodealliance
10.0
61 CVEs0 on KEV19 new
WM
Webassembly Micro Runtime
Bytecodealliance
7.8
11 CVEs0 on KEV0 new
CR
Cranelift-codegen
Bytecodealliance
9.9
6 CVEs0 on KEV0 new
LU
Lucet
Bytecodealliance
8.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115893
New
WA
wasmtime
bytecodealliance
9.9
0%
Oct 23Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
CVE-2026-115892
New
WA
wasmtime
bytecodealliance
5.7
0%
Oct 23Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type
CVE-2026-115889
New
WA
wasmtime
bytecodealliance
9.9
0%
Oct 23Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
CVE-2026-115393
New
WA
wasmtime
bytecodealliance
3.8
0%
Oct 22Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 Cross-Engine Type Confusion
CVE-2026-115392
New
WA
wasmtime
bytecodealliance
7.9
0%
Oct 22Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes
CVE-2026-115391
New
WA
wasmtime
bytecodealliance
5.8
0%
Oct 22Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 Unbounded Heap Allocation via WASIp3 Streams
CVE-2026-115390
New
WA
wasmtime
bytecodealliance
5.7
0%
Oct 22Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 Fuel Accounting Bypass DoS
CVE-2026-115389
New
WA
wasmtime
bytecodealliance
2.3
0%
Oct 22Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Denial of Service via Val API
CVE-2026-115388
New
WA
wasmtime
bytecodealliance
6.2
0%
Oct 22Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Memory Exhaustion DoS via wasmtime-wasi-http Outgoing Body Write
CVE-2026-115387
New
WA
wasmtime
bytecodealliance
6.2
0%
Oct 22Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Host Panic via WASI Filesystem Timestamp Overflow
CVE-2026-115386
New
WA
wasmtime
bytecodealliance
2.6
0%
Oct 22Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Memory Disclosure via fd_readdir
CVE-2026-115385
New
WA
wasmtime
bytecodealliance
6.2
0%
Oct 22Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Host Panic via WASIp3 Timestamps
CVE-2026-115384
New
WA
wasmtime
bytecodealliance
9.9
0%
Oct 22Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow
CVE-2026-115383
New
WA
wasmtime
bytecodealliance
4.8
0%
Oct 22Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports
CVE-2026-115382
New
WA
wasmtime
bytecodealliance
4.8
0%
Oct 22Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 wasi:http Zero Timeout Panic DoS
CVE-2026-115381
New
WA
wasmtime
bytecodealliance
4.8
0%
Oct 22Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Unbounded Host Memory Allocation via SinkOutputStream write-zeroes
CVE-2026-115380
New
WA
wasmtime
bytecodealliance
4.0
0%
Oct 22Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Fuel Limit Bypass DoS via WASI Preview 0 poll_oneoff
CVE-2026-115379
New
WA
wasmtime
bytecodealliance
5.7
0%
Oct 22Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try_call
CVE-2026-104855
WA
wasmtime
bytecodealliance
2.0
0%
Oct 2Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state
CVE-2026-58494
WA
wasmtime
bytecodealliance
6.5
0%
Jul 8Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination
CVE-2026-54786
WA
wasmtime
bytecodealliance
5.0
0%
Jul 1Wasmtime: Leak in WASIp1 `fd_renumber` implementation
CVE-2026-47261
WA
wasmtime
bytecodealliance
7.5
0%
Jun 15Wasmtime: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction
CVE-2026-44216
WA
wasmtime
bytecodealliance
7.5
0%
May 14Wasmtime: Panic when allocating a table exceeding the size of the host's address space
CVE-2026-35195
WA
wasmtime
bytecodealliance
5.4
0%
Apr 9Wasmtime has an out-of-bounds write or crash when transcoding component model strings
CVE-2026-35186
WA
wasmtime
bytecodealliance
7.5
0%
Apr 9Wasmtime has an improperly masked return value from `table.grow` with Winch compiler backend
CVE-2026-34988
WA
wasmtime
bytecodealliance
6.3
0%
Apr 9Wasmtime leaks data between pooling allocator instances
CVE-2026-34987
WA
wasmtime
bytecodealliance
9.9
0%
Apr 9Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access
CVE-2026-34983
WA
wasmtime
bytecodealliance
5.0
0%
Apr 9Wasmtime has a use-after-free bug after cloning `wasmtime::Linker`
CVE-2026-34971
WA
wasmtime
bytecodealliance
7.8
0%
Apr 9Wasmtime miscompiled guest heap access enables sandbox escape on aarch64 Cranelift
CVE-2026-34946
WA
wasmtime
bytecodealliance
7.5
0%
Apr 9Wasmtime's host panics when Winch compiler executes `table.fill`
CVE-2026-34945
WA
wasmtime
bytecodealliance
6.5
0%
Apr 9Wasmtime leaks host data with 64-bit tables and Winch
CVE-2026-34944
WA
wasmtime
bytecodealliance
5.7
0%
Apr 9Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64
CVE-2026-34943
WA
wasmtime
bytecodealliance
7.5
0%
Apr 9Wasmtime panics when lifting `flags` component value
CVE-2026-34942
WA
wasmtime
bytecodealliance
6.5
0%
Apr 9Wasmtime panics when transcoding misaligned utf-16 strings
CVE-2026-34941
WA
wasmtime
bytecodealliance
8.1
0%
Apr 9Wasmtime has a Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding
CVE-2026-27572
WA
Wasmtime
Bytecodealliance
7.5
1%
Feb 24Wasmtime is a runtime for WebAssembly
CVE-2026-27204
WA
Wasmtime
Bytecodealliance
6.5
0%
Feb 24Wasmtime is a runtime for WebAssembly
CVE-2026-27195
WA
Wasmtime
Bytecodealliance
7.5
0%
Feb 24Wasmtime is a runtime for WebAssembly
CVE-2026-24116
WA
Wasmtime
Bytecodealliance
5.5
0%
Jan 27Wasmtime is a runtime for WebAssembly
CVE-2025-64713
WM
Webassembly Micro Runtime
Bytecodealliance
7.4
0%
Nov 25WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime
CVE-2025-64704
WM
Webassembly Micro Runtime
Bytecodealliance
5.5
0%
Nov 25WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime
CVE-2025-62711
WA
Wasmtime
Bytecodealliance
3.1
0%
Oct 24Wasmtime is a runtime for WebAssembly
CVE-2025-61670
WA
Wasmtime
Bytecodealliance
3.3
0%
Oct 7Wasmtime is a runtime for WebAssembly
CVE-2025-58749
WM
Webassembly Micro Runtime
Bytecodealliance
5.3
0%
Sep 16WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime
CVE-2025-54126
WM
Webassembly Micro Runtime
Bytecodealliance
5.3
1%
Jul 29The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and command line interface
CVE-2025-53901
WA
Wasmtime
Bytecodealliance
3.5
0%
Jul 18Wasmtime is a runtime for WebAssembly
CVE-2025-43853
WM
Webassembly Micro Runtime
Bytecodealliance
5.5
0%
May 15The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and command line interface
CVE-2024-27532
WM
Webassembly Micro Runtime
Bytecodealliance
7.5
1%
Nov 8wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types
CVE-2024-25431
WM
Webassembly Micro Runtime
Bytecodealliance
7.8
1%
Nov 8An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the…
CVE-2024-51745
WA
Wasmtime
Bytecodealliance
10.0
1%
Nov 5Wasmtime is a fast and secure runtime for WebAssembly
CVE-2024-47813
WA
Wasmtime
Bytecodealliance
2.9
0%
Oct 9Wasmtime is an open source runtime for WebAssembly
CVE-2024-47763
WA
Wasmtime
Bytecodealliance
5.5
0%
Oct 9Wasmtime is an open source runtime for WebAssembly
CVE-2024-34251
WM
Webassembly Micro Runtime
Bytecodealliance
7.5
1%
May 6An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the…
CVE-2024-34250
WM
Webassembly Micro Runtime
Bytecodealliance
6.2
0%
May 6A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a denial of service via the…
CVE-2024-30266
WA
Wasmtime
Bytecodealliance
5.5
0%
Apr 4wasmtime is a runtime for WebAssembly
CVE-2023-52284
WM
Webassembly Micro Runtime
Bytecodealliance
5.5
0%
Dec 31Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because…
CVE-2023-48105
WM
Webassembly Micro Runtime
Bytecodealliance
7.5
1%
Nov 22An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the…
CVE-2023-41880
WA
Wasmtime
Bytecodealliance
5.3
1%
Sep 15Wasmtime is a standalone runtime for WebAssembly
CVE-2023-30624
WA
Wasmtime
Bytecodealliance
8.8
0%
Apr 27Wasmtime is a standalone runtime for WebAssembly
CVE-2023-27477
CR
Cranelift-codegen
Bytecodealliance
4.3
1%
Mar 8wasmtime is a fast and secure runtime for WebAssembly