Vulnerabilities in trailofbits

13 results

Vexday analysis

Trail of Bits possui 13 CVEs catalogadas, com 2 críticas, mas nenhuma sob ataque ativo conhecido no momento. A fraqueza dominante é desserialização insegura (CWE-502), padrão de risco em ferramentas de análise de segurança; a atividade recente é baixa, com apenas 2 divulgações nos últimos 90 dias, indicando um panorama de risco estável e sem pressão imediata.

CVE-2026-22609HIGHFickling has Static Analysis Bypass via Incomplete Dangerous Module BlocklistEPSS 0.5%CVE-2023-39969CRITICALuthenticode signature validation bypass vulnerabilityEPSS 0.5%CVE-2026-22607HIGHFickling Blocklist Bypass: cProfile.run()EPSS 0.5%CVE-2026-22606HIGHFickling has a bypass via runpy.run_path() and runpy.run_module()EPSS 0.4%CVE-2026-14534HIGHFickling check_safety() bypass via unlisted standard library modules (_posixsubprocess, site, atexit)EPSS 0.4%CVE-2026-22608HIGHFickling vulnerable to use of ctypes and pydoc gadget chain to bypass detectionEPSS 0.3%CVE-2026-14535HIGHFickling MLAllowlist analysis pass rendered inoperative by shared mutable state in AnalysisContext.shorten_code()EPSS 0.3%CVE-2026-22612HIGHFickling vulnerable to detection bypass due to "builtins" blindnessEPSS 0.3%CVE-2025-67747HIGHFickling has missing detection for marshal.loads and types.FunctionType in unsafe modules listEPSS 0.2%CVE-2025-67748HIGHFickling has Code Injection vulnerability via pty.spawn()EPSS 0.2%CVE-2023-40012MEDIUMuthenticode EKU validation bypassEPSS 0.2%CVE-2026-33753MEDIUMImproper Certificate Validation in rfc3161-clientEPSS 0.2%CVE-2025-52556CRITICALrfc3161-client has insufficient verification for timestamp response signaturesEPSS 0.1%