Toaruos

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Toaruos records in CISA KEV

No Toaruos vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2022-18355 CVE-2022-38932 · GHSA-f2hc-4phx-xcm3

HIGH 72

readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00307 Published 2022-09-27 No fix listed CWE-787

TI-2022-18356 CVE-2022-38934 · GHSA-49x8-xrpp-pg4g

MEDIUM 49

readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00276 Published 2022-09-28 No fix listed CWE-125

TI-2021-14850 CVE-2021-36710 · GHSA-cgmv-c2qg-xxqx

LOW 38

ToaruOS 1.99.2 is affected by incorrect access control via the kernel.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0035 Published 2022-06-08 No fix listed CWE-668