# CVSS v2: Low Exploitability Score CVEs whose CVSS v2 exploitability sub-score is 3.9 or lower. Source: https://docs.deepinfo.com/reference/vulnerability/search/examples/metrics-cvss-metric-v2-exploitability-score/ Last updated: 2026-09-26 --- `POST https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25` CVEs whose CVSS v2 exploitability sub-score is 3.9 or lower. Example 13 of 19 in **Filters › CVSS v2** · [Vulnerability Search Examples](/reference/vulnerability/search/examples/) · endpoint: [Search](/reference/vulnerability/search/) Tags: `field` `metrics.cvss_metric_v2.exploitability_score` · `operator` `lte` `metrics.cvss_metric_v2.exploitability_score` is the exploitability sub-score, in the CVSS v2 metric (`metrics.cvss_metric_v2`, one entry per scoring source). `lte` matches `3.9` and below. In the response, look at `results[].metrics.cvss_metric_v2[].exploitability_score`. ## Request | Parameter | In | Value | |---|---|---| | `page_size` | query | `25` | | `filters.must[0].name` | body | `metrics.cvss_metric_v2.exploitability_score` | | `filters.must[0].type` | body | `lte` | | `filters.must[0].value` | body | `3.9` | ```bash curl -X POST 'https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25' \ -H 'apikey: YOUR_API_KEY' \ -H 'Accept: application/json' \ -H 'Content-Type: application/json' \ -d '{ "filters": { "must": [ { "name": "metrics.cvss_metric_v2.exploitability_score", "type": "lte", "value": 3.9 } ] } }' ``` ## Response ### 200 · OK > Shortened for this page: results: 3 of 25 shown; results[].references: first 10 items; results[].configurations[].nodes[].cpe_match: first 10 items; results[].enrichment.cpe: first 10 items `Content-Type: application/json` · `ratelimit-limit: 1` · `ratelimit-remaining: 0` · `ratelimit-reset: 1` · `x-ratelimit-limit-second: 1` · `x-ratelimit-remaining-second: 0` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a` ```json { "page": 1, "page_size": 25, "result_count": 28157, "results": [ { "id": "CVE-2015-8104", "source_identifier": "user@mitre.org", "published": "2015-11-16T11:59:12Z", "last_modified": "2026-06-17T00:34:02Z", "status": "Modified", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c." }, { "lang": "es", "value": "El subsistema KVM en el kernel Linux hasta la versión 4.2.6, y Xen 4.3.x hasta la versión 4.6.x permite a usuarios del SO invitados causar una denegación de servicio (panic en el host del SO o cuelgue) desencadenando muchas excepciones #DB (también conocidas como Debug), relacionadas con svm.c." } ], "references": [ { "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cbdb967af3d54993f5814f1cee0ed311a055377d", "source": "user@mitre.org", "tags": [ "Issue Tracking", "Patch", "Vendor Advisory" ] }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html", "source": "user@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html", "source": "user@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172435.html", "source": "user@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html", "source": "user@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html", "source": "user@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html", "source": "user@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html", "source": "user@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html", "source": "user@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html", "source": "user@mitre.org", "tags": [ "Mailing List", "Third Party Advisory" ] } ], "metrics": { "cvss_metric_v40": null, "cvss_metric_v31": [ { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvss_data": { "version": "3.1", "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "privileges_required": "NONE", "user_interaction": "NONE", "scope": "CHANGED", "confidentiality_impact": "HIGH", "integrity_impact": "HIGH", "availability_impact": "HIGH", "base_score": 10.0, "base_severity": "CRITICAL", "exploit_code_maturity": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "temporal_severity": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_scope": null, "modified_confidentiality_impact": null, "modified_integrity_impact": null, "modified_availability_impact": null, "environmental_score": null, "environmental_severity": null }, "exploitability_score": 3.9, "impact_score": 6.0 } ], "cvss_metric_v30": null, "cvss_metric_v2": [ { "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "2.0", "vector_string": "AV:L/AC:M/Au:N/C:N/I:N/A:C", "access_vector": "LOCAL", "access_complexity": "MEDIUM", "authentication": "NONE", "confidentiality_impact": "NONE", "integrity_impact": "NONE", "availability_impact": "COMPLETE", "base_score": 4.7, "exploitability": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "collateral_damage_potential": null, "target_distribution": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "environmental_score": null }, "base_severity": "MEDIUM", "exploitability_score": 3.4, "impact_score": 6.9, "ac_insuf_info": false, "obtain_all_privilege": false, "obtain_user_privilege": false, "obtain_other_privilege": false, "user_interaction_required": false } ] }, "weaknesses": [ { "source": "user@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-399" } ] } ], "configurations": [ { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*", "match_criteria_id": "BF948E6A-07BE-4C7D-8A98-002E89D35F4D", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*", "match_criteria_id": "C0E23B94-1726-4F63-84BB-8D83FAB156D7", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*", "match_criteria_id": "C76124AB-4E3D-4BE0-AAEA-7FC05868E2FB", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*", "match_criteria_id": "F30B5EF5-0AE8-420B-A103-B1B25A372F09", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*", "match_criteria_id": "F784EF07-DBEC-492A-A0F4-F9F7B2551A0B", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*", "match_criteria_id": "1044792C-D544-457C-9391-4F3B5BAB978D", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*", "match_criteria_id": "FBD9AD01-50B7-4951-8A73-A6CF4801A487", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*", "match_criteria_id": "89AA8FD5-E997-4F0D-AFB6-FFBE0073BA5D", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*", "match_criteria_id": "75615D84-9CA1-456C-816D-768E37B074A4", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*", "match_criteria_id": "90CCECD0-C0F9-45A8-8699-64428637EBCA", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*", "match_criteria_id": "79A602C5-61FE-47BA-9786-F045B6C6DBA8", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*", "match_criteria_id": "5A480976-A583-4A03-A2C6-5F35F9C27D70", "version_start_including": "4.0.0", "version_start_excluding": null, "version_end_including": "4.0.34", "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*", "match_criteria_id": "C1F3632E-CE76-4C29-8F43-383EB819C008", "version_start_including": "4.1.0", "version_start_excluding": null, "version_end_including": "4.1.42", "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*", "match_criteria_id": "431E3B20-2ED2-42A8-93E2-F8404CB5D434", "version_start_including": "4.2.0", "version_start_excluding": null, "version_end_including": "4.2.34", "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*", "match_criteria_id": "36654E81-CCF3-4E1F-BAEB-09F26BD7866C", "version_start_including": "4.3.0", "version_start_excluding": null, "version_end_including": "4.3.35", "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*", "match_criteria_id": "DA344833-47A9-4AC4-B0AA-7A0F58B40C0C", "version_start_including": "5.0.0", "version_start_excluding": null, "version_end_including": "5.0.13", "version_end_excluding": null } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "match_criteria_id": "2F1B9081-FA4D-426C-B2DE-78AEA0BB6DB1", "version_start_including": null, "version_start_excluding": null, "version_end_including": "4.2.3", "version_end_excluding": null } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "match_criteria_id": "16F59A04-14CF-49E2-9973-645477EA09DA", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "match_criteria_id": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "match_criteria_id": "DEECE5FC-CACF-4496-A3E7-164736409252", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", "match_criteria_id": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "match_criteria_id": "B5A6F2F3-4894-4392-8296-3B8DD2679084", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*", "match_criteria_id": "F38D3B7E-8429-473F-BB31-FC3583EE5A5B", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] } ], "vendor_comments": null, "enrichment": { "cpe": [ { "criteria": "cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*", "vendor": "xen", "product": "xen", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "4.3.0", "affected_versions_last": "4.3.0" }, { "criteria": "cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*", "vendor": "xen", "product": "xen", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "4.3.1", "affected_versions_last": "4.3.1" }, { "criteria": "cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*", "vendor": "xen", "product": "xen", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "4.3.2", "affected_versions_last": "4.3.2" }, { "criteria": "cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*", "vendor": "xen", "product": "xen", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "4.3.3", "affected_versions_last": "4.3.3" }, { "criteria": "cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*", "vendor": "xen", "product": "xen", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "4.3.4", "affected_versions_last": "4.3.4" }, { "criteria": "cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*", "vendor": "xen", "product": "xen", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "4.4.0", "affected_versions_last": "4.4.0" }, { "criteria": "cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*", "vendor": "xen", "product": "xen", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "4.4.1", "affected_versions_last": "4.4.1" }, { "criteria": "cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*", "vendor": "xen", "product": "xen", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "4.4.2", "affected_versions_last": "4.4.2" }, { "criteria": "cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*", "vendor": "xen", "product": "xen", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "4.4.3", "affected_versions_last": "4.4.3" }, { "criteria": "cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*", "vendor": "xen", "product": "xen", "product_type": "o", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "4.5.0", "affected_versions_last": "4.5.0" } ], "cwe": null, "epss_score": { "epss": 0.02501, "percentile": 0.84024, "date": "2026-09-23" }, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "3.1", "2.0" ], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvss_data": { "version": "3.1", "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": null, "privileges_required": "NONE", "user_interaction": "NONE", "vulnerable_system_confidentiality": "HIGH", "vulnerable_system_integrity": "HIGH", "vulnerable_system_availability": "HIGH", "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": null, "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_attack_requirements": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": null, "vulnerability_response_effort": null, "provider_urgency": null, "base_score": 10.0, "base_severity": "CRITICAL" } } } }, { "id": "CVE-2022-28181", "source_identifier": "user@nvidia.com", "published": "2022-05-17T20:15:08Z", "last_modified": "2026-06-17T04:38:06Z", "status": "Modified", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components." }, { "lang": "es", "value": "El controlador de pantalla de la GPU de NVIDIA para Windows y Linux contiene una vulnerabilidad en la capa del modo del kernel, en la que un usuario normal no privilegiado en la red puede causar una escritura fuera de límites mediante un sombreador especialmente diseñado, lo que puede conllevar a una ejecución de código, una denegación de servicio, un aumento de privilegios, un divulgación de información y una manipulación de datos. El alcance del impacto puede extenderse a otros componentes" } ], "references": [ { "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5353", "source": "user@nvidia.com", "tags": [ "Patch", "Vendor Advisory" ] }, { "url": "https://security.gentoo.org/glsa/202310-02", "source": "user@nvidia.com", "tags": [ "Third Party Advisory" ] }, { "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5353", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch", "Vendor Advisory" ] }, { "url": "https://security.gentoo.org/glsa/202310-02", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ] } ], "metrics": { "cvss_metric_v40": null, "cvss_metric_v31": [ { "source": "user@nvidia.com", "type": "Secondary", "cvss_data": { "version": "3.1", "vector_string": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "HIGH", "privileges_required": "LOW", "user_interaction": "NONE", "scope": "CHANGED", "confidentiality_impact": "HIGH", "integrity_impact": "HIGH", "availability_impact": "HIGH", "base_score": 8.5, "base_severity": "HIGH", "exploit_code_maturity": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "temporal_severity": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_scope": null, "modified_confidentiality_impact": null, "modified_integrity_impact": null, "modified_availability_impact": null, "environmental_score": null, "environmental_severity": null }, "exploitability_score": 1.8, "impact_score": 6.0 }, { "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "3.1", "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "privileges_required": "LOW", "user_interaction": "NONE", "scope": "CHANGED", "confidentiality_impact": "HIGH", "integrity_impact": "HIGH", "availability_impact": "HIGH", "base_score": 9.9, "base_severity": "CRITICAL", "exploit_code_maturity": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "temporal_severity": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_scope": null, "modified_confidentiality_impact": null, "modified_integrity_impact": null, "modified_availability_impact": null, "environmental_score": null, "environmental_severity": null }, "exploitability_score": 3.1, "impact_score": 6.0 } ], "cvss_metric_v30": null, "cvss_metric_v2": [ { "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "2.0", "vector_string": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "access_vector": "LOCAL", "access_complexity": "MEDIUM", "authentication": "NONE", "confidentiality_impact": "COMPLETE", "integrity_impact": "COMPLETE", "availability_impact": "COMPLETE", "base_score": 6.9, "exploitability": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "collateral_damage_potential": null, "target_distribution": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "environmental_score": null }, "base_severity": "MEDIUM", "exploitability_score": 3.4, "impact_score": 10.0, "ac_insuf_info": false, "obtain_all_privilege": false, "obtain_user_privilege": false, "obtain_other_privilege": false, "user_interaction_required": false } ] }, "weaknesses": [ { "source": "user@nvidia.com", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-787" } ] }, { "source": "user@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-787" } ] } ], "configurations": [ { "operator": "AND", "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*", "match_criteria_id": "45F338C5-245D-4D10-9B48-B56B7094F167", "version_start_including": "11.0", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "11.8" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*", "match_criteria_id": "98C8F13F-2F8F-4BAE-B971-582084B93D58", "version_start_including": "13.0", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "13.3" }, { "vulnerable": true, "criteria": "cpe:2.3:a:nvidia:virtual_gpu:14.0:*:*:*:*:*:*:*", "match_criteria_id": "3CB2F728-3BFD-418D-AC29-A4165D1E7CA6", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] }, { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": false, "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "match_criteria_id": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": false, "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "match_criteria_id": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] }, { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:linux:*:*", "match_criteria_id": "5FB8815D-2BE1-4454-BCBD-2B648F3FF01E", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null }, { "vulnerable": true, "criteria": "cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:windows:*:*", "match_criteria_id": "ECC27EF8-10DE-47E6-B9F5-3D6BE9D06CB0", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null } ] } ] } ], "vendor_comments": null, "enrichment": { "cpe": [ { "criteria": "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*", "vendor": "nvidia", "product": "virtual_gpu", "product_type": "a", "vulnerable": true, "version_start_including": "11.0", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "11.8", "affected_versions_first": "11.0", "affected_versions_last": "11.7" }, { "criteria": "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*", "vendor": "nvidia", "product": "virtual_gpu", "product_type": "a", "vulnerable": true, "version_start_including": "13.0", "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "13.3", "affected_versions_first": "13.0", "affected_versions_last": "13.2" }, { "criteria": "cpe:2.3:a:nvidia:virtual_gpu:14.0:*:*:*:*:*:*:*", "vendor": "nvidia", "product": "virtual_gpu", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": "14.0", "affected_versions_last": "14.0" }, { "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vendor": "linux", "product": "linux_kernel", "product_type": "o", "vulnerable": false, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": null, "affected_versions_last": null }, { "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vendor": "microsoft", "product": "windows", "product_type": "o", "vulnerable": false, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": null, "affected_versions_last": null }, { "criteria": "cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:linux:*:*", "vendor": "nvidia", "product": "gpu_display_driver", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": null, "affected_versions_last": null }, { "criteria": "cpe:2.3:a:nvidia:gpu_display_driver:-:*:*:*:*:windows:*:*", "vendor": "nvidia", "product": "gpu_display_driver", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": null, "affected_versions_first": null, "affected_versions_last": null } ], "cwe": [ { "id": 787, "owasptop10_2021": null, "name": "Out-of-bounds Write", "description": "The product writes data past the end, or before the beginning, of the intended buffer.", "capec_id": null, "scope": [ "Availability", "Integrity", "Other" ], "impact": [ "DoS: Crash, Exit, or Restart", "Execute Unauthorized Code or Commands", "Modify Memory", "Unexpected State" ], "detection_method": [ "Automated Dynamic Analysis", "Automated Static Analysis" ] } ], "epss_score": { "epss": 0.01086, "percentile": 0.63856, "date": "2026-09-23" }, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "3.1", "2.0" ], "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "3.1", "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": null, "privileges_required": "LOW", "user_interaction": "NONE", "vulnerable_system_confidentiality": "HIGH", "vulnerable_system_integrity": "HIGH", "vulnerable_system_availability": "HIGH", "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": null, "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_attack_requirements": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": null, "vulnerability_response_effort": null, "provider_urgency": null, "base_score": 9.9, "base_severity": "CRITICAL" } } } }, { "id": "CVE-2024-7826", "source_identifier": "user@opentext.com", "published": "2024-10-03T17:15:15Z", "last_modified": "2026-06-17T08:20:59Z", "status": "Analyzed", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "Improper Check for Unusual or Exceptional Conditions vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrURL.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3." }, { "lang": "es", "value": "La vulnerabilidad de verificación incorrecta de condiciones inusuales o excepcionales en Webroot SecureAnywhere - Web Shield en Windows, ARM, 64 bit, 32 bit (módulos wrURL.Dll) permite el uso indebido de la funcionalidad. Este problema afecta a SecureAnywhere - Web Shield: anterior a 2.1.2.3." } ], "references": [ { "url": "https://answers.webroot.com/Webroot/ukp.aspx?pid=12&app=vw&vw=1&login=1&json=1&solutionid=4275", "source": "user@opentext.com", "tags": [ "Vendor Advisory" ] } ], "metrics": { "cvss_metric_v40": null, "cvss_metric_v31": [ { "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "3.1", "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "privileges_required": "NONE", "user_interaction": "NONE", "scope": "UNCHANGED", "confidentiality_impact": "HIGH", "integrity_impact": "HIGH", "availability_impact": "HIGH", "base_score": 9.8, "base_severity": "CRITICAL", "exploit_code_maturity": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "temporal_severity": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_scope": null, "modified_confidentiality_impact": null, "modified_integrity_impact": null, "modified_availability_impact": null, "environmental_score": null, "environmental_severity": null }, "exploitability_score": 3.9, "impact_score": 5.9 } ], "cvss_metric_v30": null, "cvss_metric_v2": [ { "source": "user@opentext.com", "type": "Secondary", "cvss_data": { "version": "2.0", "vector_string": "AV:L/AC:L/Au:S/C:C/I:N/A:C", "access_vector": "LOCAL", "access_complexity": "LOW", "authentication": "SINGLE", "confidentiality_impact": "COMPLETE", "integrity_impact": "NONE", "availability_impact": "COMPLETE", "base_score": 6.2, "exploitability": null, "remediation_level": null, "report_confidence": null, "temporal_score": null, "collateral_damage_potential": null, "target_distribution": null, "confidentiality_requirement": null, "integrity_requirement": null, "availability_requirement": null, "environmental_score": null }, "base_severity": "MEDIUM", "exploitability_score": 3.1, "impact_score": 9.2, "ac_insuf_info": false, "obtain_all_privilege": false, "obtain_user_privilege": false, "obtain_other_privilege": false, "user_interaction_required": false } ] }, "weaknesses": [ { "source": "user@opentext.com", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-754" } ] }, { "source": "user@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-754" } ] } ], "configurations": [ { "operator": null, "negate": null, "nodes": [ { "operator": "OR", "negate": false, "cpe_match": [ { "vulnerable": true, "criteria": "cpe:2.3:a:webroot:secureanywhere_web_shield:*:*:*:*:*:windows:*:*", "match_criteria_id": "02C7E112-269C-4B45-BCF4-3D9C56CA1C64", "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "2.1.2.3" } ] } ] } ], "vendor_comments": null, "enrichment": { "cpe": [ { "criteria": "cpe:2.3:a:webroot:secureanywhere_web_shield:*:*:*:*:*:windows:*:*", "vendor": "webroot", "product": "secureanywhere_web_shield", "product_type": "a", "vulnerable": true, "version_start_including": null, "version_start_excluding": null, "version_end_including": null, "version_end_excluding": "2.1.2.3", "affected_versions_first": null, "affected_versions_last": null } ], "cwe": [ { "id": 754, "owasptop10_2021": null, "name": "Improper Check for Unusual or Exceptional Conditions", "description": "The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.", "capec_id": null, "scope": [ "Availability", "Integrity" ], "impact": [ "DoS: Crash, Exit, or Restart", "Unexpected State" ], "detection_method": [ "Automated Static Analysis", "Manual Dynamic Analysis" ] } ], "epss_score": { "epss": 0.00365, "percentile": 0.3039, "date": "2026-09-23" }, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "3.1", "2.0" ], "source": "user@nist.gov", "type": "Primary", "cvss_data": { "version": "3.1", "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": null, "privileges_required": "NONE", "user_interaction": "NONE", "vulnerable_system_confidentiality": "HIGH", "vulnerable_system_integrity": "HIGH", "vulnerable_system_availability": "HIGH", "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": null, "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": null, "modified_attack_complexity": null, "modified_attack_requirements": null, "modified_privileges_required": null, "modified_user_interaction": null, "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": null, "vulnerability_response_effort": null, "provider_urgency": null, "base_score": 9.8, "base_severity": "CRITICAL" } } } } ] } ``` ## Related Examples - [CVSS v2: Low Impact Score](/reference/vulnerability/search/examples/metrics-cvss-metric-v2-impact-score/) - [KEV Remediation Due in November 2021](/reference/vulnerability/search/examples/cisa-action-due/) - [CVSS v3.0: Low Impact Score](/reference/vulnerability/search/examples/metrics-cvss-metric-v30-impact-score/) - [CVEs Published in December 2021](/reference/vulnerability/search/examples/published/) - [CVSS v3.1: Hard to Exploit](/reference/vulnerability/search/examples/metrics-cvss-metric-v31-exploitability-score/) - [CVSS 4.0: Base Score 9.0 to 9.9](/reference/vulnerability/search/examples/metrics-cvss-metric-v40-cvss-data-base-score/)