Ethereum vulnerabilities, page 3

44 vulnerabilities

Known vulnerabilities in Ethereum products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 12 products.

7.5CVE-2026-22868ethereumgo_ethereum+2
EPSS score
0.63%
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8.7.5CVE-2023-40591ethereumgo_ethereum+2
EPSS score
1.12%
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version `1.12.1-stable`, i.e, `1.12.2-unstable` and onwards. Users are advised to upgrade. There are no known workarounds for this vulnerability.7.5CVE-2023-42319ethereumgo_ethereum+1
EPSS score
1.18%
Geth (aka go-ethereum) through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a crafted GraphQL query. NOTE: the vendor's position is that the "graphql endpoint [is not] designed to withstand attacks by hostile clients, nor handle huge amounts of clients/traffic.5.3CVE-2023-36980ethereumblockchain
EPSS score
0.42%
An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold.