CVE Intelligence

Root-project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Root-project products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-24812 Critical · 9.3 CWE-125 Jan 27, 2026
An improper pointer arithmetic in root-project/root at builtins/zlib/inftrees.c
Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with program files inftrees.C. This issue affects root: through 6.36.00-rc1.
CVE-2026-24811 Critical · 9.8 CWE-20 Jan 27, 2026
An improper pointer arithmetic in root-project/root at builtins/zlib/inffast.c
Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with program files inffast.C. This issue affects root.