blender blender
productUScpe:2.3:a:blender:blender:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
EPSS ≥ 10%
0
critical
by severity
0critical30high4medium1low
updated 2026-10-28
01
vulnerabilities (35)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2009-3850US | high9.3 | Exploit |
| CVE-2005-3302US | high7.5 | Exploit |
| CVE-2008-1102US | medium6.8 | — |
| CVE-2005-3151US | high7.5 | — |
| CVE-2007-1253US | high9.3 | — |
| CVE-2017-2918US | high7.8 | — |
| CVE-2017-12099US | high7.8 | — |
| CVE-2017-12086US | high7.8 | — |
| CVE-2017-12082US | high7.8 | — |
| CVE-2017-12081US | high7.8 | — |
| CVE-2017-2903US | high7.8 | — |
| CVE-2017-2907US | high7.8 | — |
| CVE-2017-2905US | high7.8 | — |
| CVE-2017-2904US | high7.8 | — |
| CVE-2017-2902US | high7.8 | — |
| CVE-2017-2901US | high7.8 | — |
| CVE-2017-2900US | high7.8 | — |
| CVE-2017-12101US | high7.8 | — |
| CVE-2017-12104US | high7.8 | — |
| CVE-2017-12103US | high7.8 | — |
| CVE-2017-12100US | high7.8 | — |
| CVE-2017-2908US | high7.8 | — |
| CVE-2017-2906US | high7.8 | — |
| CVE-2017-2899US | high7.8 | — |
| CVE-2017-12102US | high7.8 | — |
| CVE-2017-12105US | high7.8 | — |
| CVE-2022-2832US | high7.5 | — |
| CVE-2022-2831US | high7.5 | — |
| CVE-2022-0546US | high7.8 | — |
| CVE-2022-0545US | high7.8 | — |
| CVE-2022-2833US | high7.5 | — |
| CVE-2022-0544US | medium5.5 | — |
| CVE-2008-4863US | medium6.9 | — |
| CVE-2008-1103US | medium6.9 | — |
| CVE-2010-5105US | low3.3 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-190Integer Overflow or Wraparound24 CVEs
- CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
- CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
- CWE-59Improper Link Resolution Before File Access ('Link Following')2 CVEs
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
- CWE-125Out-of-bounds Read1 CVEs
- CWE-191Integer Underflow (Wrap or Wraparound)1 CVEs
- CWE-395Use of NullPointerException Catch to Detect NULL Pointer Dereference1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE35 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan