apache / fory
9 known vulnerabilities in apache fory.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-64608 | Medium | 0.8% | 9.8 | Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implemen… | |
| CVE-2026-64609 | Medium | 0.8% | 9.1 | Out-of-bounds read via sun.misc.Unsafe in Apache Fory. When out-of-band zero-cop… | |
| CVE-2026-64606 | Medium | 0.7% | 9.8 | Deserialization of untrusted data vulnerability that may allow class-registratio… | |
| CVE-2026-60080 | Medium | 0.7% | 7.3 | Use After Free vulnerability in the Rust deserialization logic of Apache Fory. T… | |
| CVE-2026-48207 | Medium | 0.6% | 9.8 | Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializ… | |
| CVE-2026-71558 | Medium | 0.5% | 9.8 | Heap type confusion vulnerability in Apache Fory C++ deserialization. This issu… | |
| CVE-2026-50076 | Medium | 0.5% | 9.1 | Deserialization of Untrusted Data in the Java replace-resolve path in Apache For… | |
| CVE-2026-71559 | Medium | 0.4% | 7.5 | Deserialization of Untrusted Data vulnerability in the Go implementation of Apac… | |
| CVE-2026-71560 | Medium | 0.4% | 9.1 | Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue… |