AR
Product
Arrow
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 4Medium 0Low 0
Watch
Add Arrow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-111497 In wildKEVNew | 9.8 | Oct 22 | Out-of-Bounds Write in Google Brotli Decoder Affected: through 26.0.0; 27.0.0 |
| CVE-2024-52338 | 9.8 | Nov 28 | Apache Arrow R package: Arbitrary code execution when loading a malicious data file Affected: 4.0.0 before 17.0.0 |
Showing 2