Go google.golang.org/grpc

Name: Go google.golang.org/grpc
Brand: Go

productUS

pkg:golang/google.golang.org/grpc

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

critical

by severity

0critical0high0medium0low

updated 2026-10-28

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-33186US	—	1.58% (75th)	Exploit	1.79.3	2026-03-20	< 1.79.3
CVE-2026-84445US	—	0.64% (51st)	—	1.85.0-dev.0.20260825072537-93e31b48545e	2026-09-14	4 versions
CVE-2026-84304US	—	0.61% (49th)	—	1.83.1	2026-09-01	< 1.83.1
CVE-2026-84303US	—OT elevated	0.31% (24th)	—	1.83.1	2026-09-01	< 1.83.1

The flaw types (CWEs) most of these CVEs share.

CWE-129Improper Validation of Array Index1 CVEs
CWE-178Improper Handling of Case Sensitivity1 CVEs
CWE-248Uncaught Exception1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-551Incorrect Behavior Order: Authorization Before Parsing and Canonicalization1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.