MuseScore

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

MuseScore records in CISA KEV

No MuseScore vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Musescore · all components

TI-2023-11826 CVE-2023-26923 · GHSA-68q9-m85g-jq3q

HIGH 66

Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00362 Published 2023-03-28 No fix listed CWE-787

TI-2023-23934 CVE-2023-44428 · GHSA-99f4-c4w3-4vm2

LOW 37

MuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00534 Published 2024-05-03 No fix listed CWE-122