bytecodealliance

Records98All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

bytecodealliance records in CISA KEV

No bytecodealliance vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records in Cranelift-codegen · all components

TI-2023-11636 CVE-2023-26489 · GHSA-ff4p-7xrq-q5r8

MEDIUM 45

wasmtime is a fast and secure runtime for WebAssembly.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.01251 Published 2023-03-08 Fixed in 4.0.1, 5.0.1 +4 CWE-125

TI-2022-13189 CVE-2022-31146 · GHSA-5fhj-g3p3-pq9g

MEDIUM 41

Wasmtime is a standalone runtime for WebAssembly.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0125 Published 2022-07-20 Fixed in 0.38.2, 0.85.2 CWE-416

TI-2021-12298 CVE-2021-32629 · GHSA-hpqh-2wqx-7qp5

LOW 38

Cranelift is an open-source code generator maintained by Bytecode Alliance.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00455 Published 2021-05-24 Fixed in 0.73.1, 0.27.0 CWE-788

TI-2022-13211 CVE-2022-31169 · GHSA-7f6x-jwh5-m9r4

LOW 35

Wasmtime is a standalone runtime for WebAssembly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00924 Published 2022-07-21 Fixed in 0.38.2, 0.85.2 CWE-682

TI-2022-13148 CVE-2022-31104 · GHSA-jqwc-c49r-4w2x

LOW 29

Wasmtime is a standalone runtime for WebAssembly.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.01785 Published 2022-06-27 Fixed in 0.38.1, 0.85.1 CWE-682

TI-2023-12205 CVE-2023-27477 · GHSA-xm67-587q-r2vw

LOW 21

wasmtime is a fast and secure runtime for WebAssembly.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00624 Published 2023-03-08 Fixed in 4.0.1, 5.0.1 +4 CWE-193