AI Security Threat Feed

Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.

1,604

AI/ML CVEs Tracked

225

Critical

77

New This Week

16

In CISA KEV

Latest AI Security Threats

Showing 20 of 1604 results
Severity CVE ID Summary CVSS EPSS Package Date
HIGH CVE-2023-25675 TensorFlow XLA: Bincount shape mismatch causes DoS 7.5 0.2% tensorflow Mar 25 HIGH E CVE-2023-25674 TensorFlow: null pointer DoS in RandomShuffle (XLA) 7.5 0.4% tensorflow Mar 25 HIGH CVE-2023-25673 TensorFlow: FPE in TensorListSplit (XLA) remote DoS 7.5 0.3% tensorflow Mar 25 HIGH CVE-2023-25672 TensorFlow: NPE in LookupTableImportV2 causes DoS 7.5 0.1% tensorflow Mar 25 HIGH CVE-2023-25671 TensorFlow: OOB write DoS via integer type mismatch 7.5 0.3% tensorflow Mar 25 HIGH CVE-2023-25670 TensorFlow: null ptr DoS in quantized MKL MatMul 7.5 0.2% tensorflow Mar 25 HIGH CVE-2023-25669 TensorFlow: DoS via AvgPoolGrad invalid stride params 7.5 0.2% tensorflow Mar 25 CRIT E CVE-2023-25668 TensorFlow: unauthenticated RCE via heap buffer overflow 9.8 1.5% tensorflow Mar 25 HIGH E CVE-2023-25667 TensorFlow: integer overflow DoS in video frame decoding 7.5 0.2% tensorflow Mar 25 HIGH CVE-2023-25666 TensorFlow: FPE in AudioSpectrogram causes DoS 7.5 0.1% tensorflow Mar 25 HIGH E CVE-2023-25665 TensorFlow: null ptr deref DoS via sparse tensors 7.5 0.1% tensorflow Mar 25 CRIT E CVE-2023-25664 TensorFlow: heap overflow in AvgPoolGrad, RCE risk 9.8 0.1% tensorflow Mar 25 HIGH CVE-2023-25663 TensorFlow: null ptr deref crashes inference serving 7.5 0.2% tensorflow Mar 25 HIGH CVE-2023-25662 TensorFlow: integer overflow in EditDistance causes DoS 7.5 0.2% tensorflow Mar 25 HIGH CVE-2023-25660 TensorFlow: null ptr deref in Print op allows remote DoS 7.5 0.2% tensorflow Mar 25 HIGH CVE-2023-25659 TensorFlow: OOB read in DynamicStitch enables DoS 7.5 0.2% tensorflow Mar 25 HIGH CVE-2023-25658 TensorFlow: OOB read in GRUBlockCellGrad causes DoS 7.5 0.1% tensorflow Mar 25 CRIT CVE-2023-1177 MLflow: path traversal allows arbitrary file read/write 9.8 93.3% mlflow Mar 24 LOW E CVE-2023-1176 MLflow: path traversal exposes arbitrary local files 3.3 0.2% mlflow Mar 24 MEDI CVE-2023-27494 Streamlit: reflected XSS enables session hijacking 6.1 0.7% streamlit Mar 16

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial