P
Vendor security profile
patriksimek
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs51
Critical33
CISA KEV0
Public exploit42
Patch rate%14
Avg. CVSS8.8
12-month vulnerability rate
0
0
0
0
0
0
11
0
0
3
37
0
CVE KEV
CVE severity distribution
51toplam CVE
Critical33 (65%)
High10 (20%)
Medium6 (12%)
Low2 (4%)
Patch and exploitation view
%14
Verified patch
%0
CISA KEV
%82
Public exploit
7Patch available
0Partial
0Workaround
0Vendor: no patch
44Unknown
Latest vulnerabilities
6.9
CVE-2026-100723
vm2 before 3.12.2 Memory Disclosure via zlib Buffer Pool
P
Patch verifiedEPSS %0
8.9
CVE-2026-100722
vm2 before 3.12.2 Host Process Termination via Construct Trap
P
Patch status unknownEPSS %0
9.5
CVE-2026-100721
vm2 before 3.12.2 Authorization Bypass via Custom Resolver
P
Patch verifiedEPSS %0
10.0
CVE-2026-93606
vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species
P
Patch status unknownEPSS %1
10.0
CVE-2026-93605
vm2 NodeVM before 3.12.1 Remote Code Execution via child_process
P
Patch status unknownEPSS %1
6.9
CVE-2026-93604
vm2 3.11.8 Sandbox Escape via crypto.setFips
P
Patch status unknownEPSS %0
10.0
CVE-2026-93603
vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Function
P
Patch status unknownEPSS %1
6.9
CVE-2026-92963
vm2 before 3.11.2 Information Disclosure via Internal State
P
Patch status unknownEPSS %0
2.1
CVE-2026-92962
vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js
P
Patch status unknownEPSS %0
8.7
CVE-2026-92961
vm2 before 3.11.6 Memory Exhaustion DoS via bufferAllocLimit Bypass
P
Patch status unknownEPSS %1