Virustotal

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Virustotal product.

RSS Feeds for Virustotal security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Virustotal products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Virustotal Sorted by Most Security Vulnerabilities since 2018

Virustotal Yara11 vulnerabilities

Virustotal1 vulnerability

By the Year

In 2026 there have been 0 vulnerabilities in Virustotal. Virustotal did not have any published security vulnerabilities last year.

Year	Vulnerabilities	Average Score
2026	0	0.00
2025	0	0.00
2024	0	0.00
2023	1	8.80
2022	1	5.50
2021	1	9.10
2020	0	0.00
2019	2	5.50
2018	6	6.42

It may take a day or so for new Virustotal vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Virustotal Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2023-40857	Aug 28, 2023	Yara 4.3.2 Buffer Overflow via yr_execute_cod in exe.c Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_execute_cod function in the exe.c component.	Yara
CVE-2021-45429	Feb 04, 2022	A Buffer Overflow vulnerablity exists in VirusTotal YARA git commit: 605b2edf07ed8eb9a2c61ba22eb2e7c362f47ba7 A Buffer Overflow vulnerablity exists in VirusTotal YARA git commit: 605b2edf07ed8eb9a2c61ba22eb2e7c362f47ba7 via yr_set_configuration in yara/libyara/libyara.c, which could cause a Denial of Service.	Yara
CVE-2021-3402	May 14, 2021	An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4	Yara
CVE-2019-19648	Dec 09, 2019	In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real size In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real size. A specially crafted MachO file can cause an out-of-bounds memory access, resulting in Denial of Service (application crash) or potential code execution.	Yara
CVE-2019-5020	Jul 31, 2019	An exploitable denial of service vulnerability exists in the object lookup functionality of Yara 3.8.1 An exploitable denial of service vulnerability exists in the object lookup functionality of Yara 3.8.1. A specially crafted binary file can cause a negative value to be read to satisfy an assert, resulting in Denial of Service. An attacker can create a malicious binary to trigger this vulnerability.	Yara
CVE-2018-19974	Dec 17, 2018	In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack).	Yara
CVE-2018-19975	Dec 17, 2018	In YARA 3.8.1, bytecode in a specially crafted compiled rule can read data from any arbitrary address in memory, in libyara/exec.c In YARA 3.8.1, bytecode in a specially crafted compiled rule can read data from any arbitrary address in memory, in libyara/exec.c. Specifically, OP_COUNT can read a DWORD.	Yara
CVE-2018-19976	Dec 17, 2018	In YARA 3.8.1, bytecode in a specially crafted compiled rule is exposed to information about its environment, in libyara/exec.c In YARA 3.8.1, bytecode in a specially crafted compiled rule is exposed to information about its environment, in libyara/exec.c. This is a consequence of the design of the YARA virtual machine.	Yara
CVE-2018-12034	Jun 15, 2018	In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yr_execute_code in libyara/exec.c.	Yara
CVE-2018-12035	Jun 15, 2018	In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds write vulnerability in yr_execute_code in libyara/exec.c.	Yara