Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-24811

An improper pointer arithmetic in root-project/root at builtins/zlib/inffast.c

Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with program files inffast.C. This issue affects root.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Riot Project Root
Products
Riot Root
CVE-2025-57227

An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted executable file into a parent folder.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Kingosoft Root
Products
Kingo Root Root
CVE-2010-3376

The (1) proofserv, (2) xrdcp, (3) xrdpwdadmin, and (4) xrd scripts in ROOT 5.18/00 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Root
Products
Root