Product by Rust
The Rust Programming Language Standard Library
24 known vulnerabilities in The Rust Programming Language Standard Library (Rust), 0 of them actively exploited (CISA KEV).
Key figures
24
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-24576 | Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows | 10.0 | |
| Critical | CVE-2024-3566 | Node.js: Command Injection | 9.8 | |
| Critical | CVE-2018-1000810 | rust-lang Rust: Buffer Overflow | 9.8 | |
| Critical | CVE-2021-31162 | rust-lang Rust: Double Free | 9.8 | |
| Critical | CVE-2021-28879 | rust-lang Rust: Buffer Overflow | 9.8 | |
| Critical | CVE-2021-29922 | rust-lang Rust: security vulnerability | 9.1 | |
| Critical | CVE-2020-36318 | rust-lang Rust: Use-After-Free | 9.8 | |
| High | CVE-2019-12083 | rust-lang Rust: Out-of-Bounds Write | 8.1 | |
| High | CVE-2020-36323 | rust-lang Rust: security vulnerability | 8.2 | |
| High | CVE-2021-28875 | rust-lang Rust: Buffer Overflow | 7.5 | |
| High | CVE-2021-28878 | rust-lang Rust: security vulnerability | 7.5 | |
| High | CVE-2018-1000622 | rust-lang Rust: Code Execution | 7.8 | |
| High | CVE-2020-36317 | rust-lang Rust: security vulnerability | 7.5 | |
| High | CVE-2021-28877 | rust-lang Rust: security vulnerability | 7.5 | |
| High | CVE-2022-21658 | Race condition in std::fs::remove_dir_all in rustlang | 7.3 | |
| High | CVE-2015-20001 | rust-lang Rust: security vulnerability | 7.5 | |
| Medium | CVE-2021-28876 | rust-lang Rust: security vulnerability | 5.3 | |
| High | CVE-2024-43402 | Rust OS Command Injection/Argument Injection vulnerability | 8.2 | |
| Medium | CVE-2019-1010299 | The Rust Programming Language Standard Library: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| Medium | CVE-2018-25008 | rust-lang Rust: Race Condition | 5.9 | |
| Medium | CVE-2023-40030 | Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports | 6.1 | |
| High | CVE-2019-16760 | Cargo prior to Rust 1.26.0 may download the wrong dependency | 4.6 | |
| High | CVE-2018-1000657 | rust-lang Rust: Buffer Overflow | 7.8 | |
| Medium | CVE-2017-20004 | rust-lang Rust: Race Condition | 5.9 |