Skip to content
OpenAdvisories

Vendor

Wind River

3 known vulnerabilities.

Wind River at a glance

Last 12 months
2
Critical · all time
0
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 2 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202620
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202510
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

VxWorks 7 2 Linux 1 VxWorks Vx7 0 VxWorks End-of-Life 0 Advanced Networking Technology (ANT) 0 VxWorks bootrom network stack 0 VxWorks 653 0 VxWorks Cert 0 VxWorks < 7 SR620 0 VxWorks <= 21.07 0 VxWorks under CURRENT support (6.9.4.11, Vx7 SR540, Vx7 SR610) 0 Interpeak IPnet TCP/IP Stack 0 VxWorks 0 VxWorks 6.9 0 VxWorks 653 Platform/Platform for Safety Critical ARINC 653 0 Schneider Electric SAGE 1210 RTU 0 Schneider Electric SAGE 1230 RTU 0 Schneider Electric SAGE 1250 RTU 0 Schneider Electric SAGE 2200 RTU 0 Schneider Electric SAGE 1310 RTU 0 Schneider Electric SAGE 1330 RTU 0 Schneider Electric SAGE 1350 RTU 0 Schneider Electric SAGE 2300 RTU 0 Schneider Electric SAGE 3030 RTU 0 Schneider Electric SAGE 1410 RTU 0 Schneider Electric SAGE 1430 RTU 0 Schneider Electric SAGE 1450 RTU 0 Schneider Electric SAGE 2400 RTU 0 Schneider Electric SAGE 3030 Magnum RTU 0 Schneider Electric SAGE LANDAC2 Upgrade Kit 0

Latest advisories

  • High max 8.8
    WID-SEC-2026-3704 1 CVE

    Wind River VxWorks: Schwachstelle ermöglicht Privilegieneskalation

    Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Wind River VxWorks ausnutzen, um beliebigen Code auszuführen und erhöhte Berechtigungen zu erlangen.

    Wind River
  • Medium max 7.8
    WID-SEC-2026-3624 4 CVEs

    Wind River VxWorks 7: Mehrere Schwachstellen

    Ein lokaler Angreifer kann mehrere Schwachstellen in Wind River VxWorks ausnutzen, um einen Denial of Service Angriff durchzuführen, möglicherweise beliebigen Code auszuführen und Daten offenzulegen oder zu manipulieren.

    Wind River
  • Medium max 6.7
    WID-SEC-2025-2091 1 CVE

    Wind River VxWorks: Schwachstelle ermöglicht nicht näher spezifizierten Angriff

    Ein lokaler Angreifer kann eine Schwachstelle in Wind River VxWorks ausnutzen, um einen nicht näher spezifizierten Angriff auszuführen.

    Wind River
  • Medium
    ICSA-15-169-01B 1 CVE rev. 2

    Wind River VXWorks TCP Predictability Vulnerability in ICS Devices (Update B)

    Wind River
    first Mar 21, 2015
  • Medium
    WID-SEC-2025-0192 0 CVEs

    Wind River VxWorks: Schwachstelle ermöglicht Offenlegung von Informationen

    Ein Angreifer kann eine Schwachstelle in Wind River VxWorks ausnutzen, um Informationen offenzulegen.

    Wind River
All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.5
    CVE-2026-102005

    VxWorks Memory Allocation

    Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 2…

    Wind River VxWorks 7
  • Medium 5.5
    CVE-2026-97686

    VxWorks 7 Memory Resource leak

    Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09.

    Wind River VxWorks 7
  • High 7.5
    CVE-2025-8671 Public exploit

    CVE-2025-8671

    A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening stre…

    varnish-software Fastly SUSE Linux Wind River Linux Debian Ubuntu Alpine crates.io