AI Threat Alert

AI Security Threat Feed

Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.

1,604

AI/ML CVEs Tracked

225

Critical

78

New This Week

16

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited

Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 910 results — Active exploitation

Severity CVE ID Summary CVSS EPSS Package Date

MEDI E CVE-2022-29204 TensorFlow: DoS via UnsortedSegmentJoin input validation 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29203 TensorFlow: DoS via SpaceToBatchND integer overflow 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29202 TensorFlow: DoS via ragged tensor memory exhaustion 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29201 TensorFlow: QuantizedConv2D null deref crashes model server 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29207 TensorFlow: null-ptr deref in eager mode causes DoS 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29200 TensorFlow: LSTMBlockCell DoS via invalid tensor rank 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29199 TensorFlow: CHECK-fail DoS in LoadAndRemapMatrix op 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29198 TensorFlow: DoS via sparse tensor input validation failure 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29197 TensorFlow: DoS via UnsortedSegmentJoin input validation 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29196 TensorFlow: DoS via invalid Conv3D filter input 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29195 TensorFlow: StagePeek DoS via unvalidated index scalar 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29193 TensorFlow: DoS via TensorSummaryV2 input validation failure 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29194 TensorFlow: DoS via malformed DeleteSessionTensor input 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29192 TensorFlow: DoS via QuantizeAndDequantize input validation 5.5 0.1% tensorflow May 20 MEDI E CVE-2022-29191 TensorFlow: DoS via GetSessionTensor input validation 5.5 0.1% tensorflow May 20 HIGH E CVE-2022-24770 Gradio: CSV formula injection via flagging enables RCE 8.8 0.6% gradio Mar 17 CRIT E CVE-2022-0845 pytorch-lightning: code injection enables full RCE 9.8 0.3% pytorch_lightning Mar 5 HIGH E CVE-2022-0736 MLflow: insecure temp file handling causes DoS 7.5 0.6% mlflow Feb 23 MEDI E CVE-2022-23595 TensorFlow XLA: null pointer dereference causes DoS 6.5 0.2% tensorflow Feb 4 HIGH E CVE-2022-23593 TensorFlow MLIR-TFRT: DoS via scalar shape segfault 7.5 0.3% tensorflow Feb 4

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial