CVE Tools
Track your stack

Sil

19 CVEs tracked since 2016. Since Feb 2016, none of them reached CISA KEV.

Sil CVEs per month

Feb 2016 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Sil CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2016-0240
2016-03150
2016-040
2016-050
2016-060
2016-070
2016-08no snapshot
2016-090
2016-100
2016-11no snapshot
2016-120
2017-01no snapshot
2017-021 or fewer
2017-031 or fewer
2017-04no snapshot
2017-051 or fewer
2017-06no snapshot
2017-071 or fewer
2017-082 or fewer
2017-091 or fewer
2017-101 or fewer
2017-11no snapshot
2017-121 or fewer
2018-012 or fewer
2018-021 or fewer
2018-032 or fewer
2018-04no snapshot
2018-05no snapshot
2018-062 or fewer
2018-072 or fewer
2018-082 or fewer
2018-092 or fewer
2018-102 or fewer
2018-11no snapshot
2018-122 or fewer
2019-01no snapshot
2019-021 or fewer
2019-03no snapshot
2019-04no snapshot
2019-051 or fewer
2019-06no snapshot
2019-072 or fewer
2019-082 or fewer
2019-092 or fewer
2019-102 or fewer
2019-112 or fewer
2019-122 or fewer
2020-012 or fewer
2020-022 or fewer
2020-032 or fewer
2020-04no snapshot
2020-05no snapshot
2020-062 or fewer
2020-07no snapshot
2020-082 or fewer
2020-091 or fewer
2020-101 or fewer
2020-111 or fewer
2020-122 or fewer
2021-012 or fewer
2021-022 or fewer
2021-03no snapshot
2021-042 or fewer
2021-052 or fewer
2021-062 or fewer
2021-072 or fewer
2021-083 or fewer
2021-092 or fewer
2021-102 or fewer
2021-112 or fewer
2021-122 or fewer
2022-012 or fewer
2022-022 or fewer
2022-033 or fewer
2022-043 or fewer
2022-053 or fewer
2022-063 or fewer
2022-073 or fewer
2022-083 or fewer
2022-093 or fewer
2022-102 or fewer
2022-113 or fewer
2022-123 or fewer
2023-013 or fewer
2023-023 or fewer
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-064 or fewer
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-108 or fewer

Products

The products that kept showing up in Sil's monthly top three, with their CVEs summed over those months.

  1. Graphite2192 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Sil.

  1. CVE-2017-7777Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.8.8
  2. CVE-2017-7776Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.8.1
  3. CVE-2017-7774Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.9.1
  4. CVE-2017-7773Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.8.8
  5. CVE-2017-7771Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.8.1
  6. CVE-2017-7772Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.8.8
  7. CVE-2017-5436An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library ...8.8
  8. CVE-2017-7778A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in G...9.8
  9. CVE-2018-7999In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or po...8.8
  10. CVE-2016-2794The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a ...8.8
  11. CVE-2016-2790The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data...8.8
  12. CVE-2016-2791The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (...8.8
  13. CVE-2016-2802The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a d...8.8
  14. CVE-2016-2800The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of s...8.8
  15. CVE-2016-2798The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of ...8.8

The record

Peak rank
#12 in Mar 2016
Busiest month shown
Mar 2016, 15 CVEs
Months with a KEV entry
0 since Feb 2016
Monthly snapshots
2 since 2016
Sil's full record, month by month