A
Vendor security profile
anthropic
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs15
Critical2
CISA KEV0
Public exploit1
Patch rate%20
Avg. CVSS7.1
12-month vulnerability rate
0
0
1
1
4
1
1
3
0
0
1
1
CVE KEV
CVE severity distribution
15toplam CVE
Critical2 (13%)
High7 (47%)
Medium5 (33%)
Low1 (7%)
Patch and exploitation view
%20
Verified patch
%0
CISA KEV
%7
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
12Unknown
Latest vulnerabilities
7.7
CVE-2026-103435
Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code
A
Patch status unknownEPSS %0
2.0
CVE-2026-103012
Vulnerability in @anthropic Ai/claude Code
A
Patch status unknownEPSS %0
8.8
CVE-2026-55607
Path traversal in Anthropic Claude Code
A
Patch status unknownEPSS %1
6.1
CVE-2026-46406
Information exposure in Anthropic Claude Code
A
Patch status unknownEPSS %0
9.1
CVE-2026-54316
Information exposure in Anthropic Claude Code
A
Patch status unknownEPSS %1
8.8
CVE-2026-40068
Improper input validation in Anthropic Claude Code
A
Patch status unknownEPSS %1
7.3
CVE-2026-35603
Vulnerability in Anthropic Claude Code
A
Patch status unknownEPSS %0
5.3
CVE-2026-34452
Vulnerability in Anthropic Claude Sdk For Python
A
Patch verifiedEPSS %0
5.4
CVE-2026-34451
Path traversal in Anthropic Claude Sdk For Typescript
A
Patch verifiedEPSS %0
4.4
CVE-2026-34450
Incorrect permission assignment in Anthropic Claude Sdk For Python
A
Patch verifiedEPSS %0