Vendors / surf Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now surf records in CISA KEV No surf vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
PInfo 0.6.9-5.1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -m parameter.
CVSS 4.0 HIGH 8.6· Local · No auth · No interaction · EPSS 0.00245 · Published 2026-03-28 · No fix listed CWE-787
Priority LOW 25
surf: cookie jar has read access from other local user
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00381 · Published 2019-11-19 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0