Vendor
Rust
39 known vulnerabilities in products by Rust, 0 of them actively exploited (CISA KEV).
Key figures
39
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-24576 | Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows | 10.0 | |
| Critical | CVE-2024-3566 | Node.js: Command Injection | 9.8 | |
| High | CVE-2022-24713 | Regular expression denial of service in Rust's regex crate | 7.5 | |
| Critical | CVE-2018-1000810 | rust-lang Rust: Buffer Overflow | 9.8 | |
| Critical | CVE-2021-31162 | rust-lang Rust: Double Free | 9.8 | |
| Critical | CVE-2021-28879 | rust-lang Rust: Buffer Overflow | 9.8 | |
| Critical | CVE-2021-29922 | rust-lang Rust: security vulnerability | 9.1 | |
| Critical | CVE-2020-36318 | rust-lang Rust: Use-After-Free | 9.8 | |
| High | CVE-2019-12083 | rust-lang Rust: Out-of-Bounds Write | 8.1 | |
| High | CVE-2020-36323 | rust-lang Rust: security vulnerability | 8.2 | |
| High | CVE-2021-28875 | rust-lang Rust: Buffer Overflow | 7.5 | |
| High | CVE-2021-28878 | rust-lang Rust: security vulnerability | 7.5 | |
| High | CVE-2018-1000622 | rust-lang Rust: Code Execution | 7.8 | |
| High | CVE-2020-36317 | rust-lang Rust: security vulnerability | 7.5 | |
| High | CVE-2020-26297 | XSS in mdBook's search page | 8.2 | |
| High | CVE-2021-28877 | rust-lang Rust: security vulnerability | 7.5 | |
| High | CVE-2022-21658 | Race condition in std::fs::remove_dir_all in rustlang | 7.3 | |
| High | CVE-2015-20001 | rust-lang Rust: security vulnerability | 7.5 | |
| Medium | CVE-2021-28876 | rust-lang Rust: security vulnerability | 5.3 | |
| High | CVE-2024-43402 | Rust OS Command Injection/Argument Injection vulnerability | 8.2 | |
| Medium | CVE-2019-1010299 | The Rust Programming Language Standard Library: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| High | CVE-2020-26281 | request smuggling in async-h1 | 6.8 | |
| High | CVE-2023-38497 | Cargo not respecting umask when extracting crate archives | 7.8 | |
| Medium | CVE-2026-5222 | Cargo can be coerced to share credentials between registries | 6.5 | |
| Medium | CVE-2018-25008 | rust-lang Rust: Race Condition | 5.9 |
Products
| The Rust Programming Language Standard Library | 24 | 0 |
| Rust Cargo | 7 | 0 |