Read the docs

ethereum

Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high28CVSS 7.0–8.9

Exploited now

ethereum records in CISA KEV

No ethereum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

24 records in Go Ethereum · all components

Priority MEDIUM 45

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00659 Published 2026-02-19 Fixed in 1.16.9 CWE-20
Priority MEDIUM 40

The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04255 Published 2018-07-05 Fixed in 1.8.11 CWE-129
Priority LOW 37

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00651 Published 2026-02-19 Fixed in 1.17.0 CWE-770
TI-2020-16061 CVE-2020-26240 · GHSA-v592-xf75-856p

Erroneous Proof of Work calculation in geth

Priority LOW 37

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01863 Published 2020-11-25 Fixed in 1.9.24 CWE-682
Priority LOW 36

A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, whic…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01373 Published 2022-03-04 No fix listed CWE-400
TI-2020-16063 CVE-2020-26242 · GHSA-jm5c-rv3w-w83m

Denial of service in geth

Priority LOW 36

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0148 Published 2020-11-25 Fixed in 1.9.18, 1.1.1 CWE-125
TI-2020-16062 CVE-2020-26241 · GHSA-69v6-xc2j-r2jf

Shallow copy bug in geth

Priority LOW 34

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.01226 Published 2020-11-25 Fixed in 1.9.17 CWE-682
TI-2020-16085 CVE-2020-26264 · GHSA-r33q-22hv-j29q

LES Server DoS via GetProofsV2

Priority LOW 33

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01886 Published 2020-12-11 Fixed in 1.9.25 CWE-400
Priority LOW 32

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00625 Published 2026-01-13 Fixed in 1.16.8 CWE-20
Priority LOW 32

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00727 Published 2026-01-13 Fixed in 1.16.8 CWE-20
TI-2022-11720 CVE-2022-29177 · GHSA-wjxw-gh3m-7pm5

DoS via malicious p2p message in Go-Ethereum

Priority LOW 29

Go Ethereum is the official Golang implementation of the Ethereum protocol.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01155 Published 2022-05-20 Fixed in 1.10.17 CWE-400
TI-2021-18012 CVE-2021-41173 · GHSA-59hh-656j-3p7v

DoS via maliciously crafted p2p message

Priority LOW 28

Go Ethereum is the official Golang implementation of the Ethereum protocol.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01242 Published 2021-10-26 Fixed in 1.10.9 CWE-20
TI-2020-16086 CVE-2020-26265 · GHSA-xw37-57qp-9mm4

Consensus flaw during block processing

Priority LOW 26

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0092 Published 2020-12-11 Fixed in 1.9.20 CWE-682
Open these records in search →