H
Vendor security profile
h2o
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical2
CISA KEV0
Public exploit1
Patch rate%80
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
7
1
0
0
CVE KEV
CVE severity distribution
10toplam CVE
Critical2 (20%)
High5 (50%)
Medium3 (30%)
Patch and exploitation view
%80
Verified patch
%0
CISA KEV
%10
Public exploit
8Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
5.5
CVE-2026-45271
picotls has infinite recursion in the minicrypto ASN.1 decoder
H
Patch status unknownEPSS %0
7.5
CVE-2026-54340
Uncontrolled resource consumption in H2o
H
Patch verifiedEPSS %0
7.5
CVE-2026-44453
Resource allocation without limits in H2o
H
Patch verifiedEPSS %0
5.9
CVE-2026-44452
Out-of-bounds read in H2o
H
Patch verifiedEPSS %0
7.5
CVE-2026-44436
Buffer overflow in H2o Quicly
H
Patch verifiedEPSS %0
7.5
CVE-2026-44435
Uncontrolled resource consumption in H2o Quicly
H
Patch verifiedEPSS %0
5.3
CVE-2026-44434
Vulnerability in H2o Quicly
H
Patch verifiedEPSS %0
7.5
CVE-2026-44433
Uncontrolled resource consumption in H2o Quicly
H
Patch verifiedEPSS %0
9.8
CVE-2025-10768
Improper input validation in H2o
H
Patch status unknownEPSS %0
9.8
CVE-2025-6544
Deserialization of untrusted data in H2o
H
Patch verifiedEPSS %1