AI Threat Alert

AI Security Threat Feed

Latest CVEs affecting AI/ML systems — LLM frameworks, ML libraries, AI agents, vector databases, and inference servers. Vulnerabilities are tracked from NVD, GitHub Advisory, CISA KEV, MITRE ATLAS, and enriched with CVSS, EPSS, exploitation confidence, AI-component classification, and compliance mappings to ISO 42001, EU AI Act, NIST AI RMF, and OWASP LLM Top 10. Updated continuously as new CVEs are published.

Sources
Each CVE is enriched with
  • CVSS severity
  • EPSS exploit probability
  • Exploitation confidence
  • AI-component classification
  • Compliance mappings
2,377

AI/ML CVEs Tracked

337

Critical

391

New This Week

18

In CISA KEV

Sort: Date CVSS EPSS KEV first Most exploited
Filter: All Critical High Medium KEV only Active exploitation Has patch No patch

Latest AI Security Threats

Showing 20 of 1551 results — no patch
Severity CVE ID Summary CVSS EPSS Package Date
HIGH E CVE-2021-29596 TensorFlow TFLite: div-by-zero in EmbeddingLookup op 7.8 0.2% tensorflow May 14 HIGH E CVE-2021-29595 TensorFlow TFLite: crash/RCE via malicious model file 7.8 0.2% tensorflow May 14 HIGH E CVE-2021-29594 TFLite: divide-by-zero in conv allows code execution 7.8 0.2% tensorflow May 14 HIGH E CVE-2021-29593 TensorFlow TFLite: div-by-zero via crafted model file 7.8 0.2% tensorflow May 14 HIGH E CVE-2021-29592 TensorFlow Lite: null-ptr deref in Reshape via 1D tensor 7.8 0.2% tensorflow May 14 HIGH E CVE-2021-29591 TFLite: crafted model causes infinite loop / stack overflow 7.8 0.3% tensorflow May 14 HIGH E CVE-2021-29590 TensorFlow TFLite: OOB read via empty tensor in Min/Max ops 7.1 0.2% tensorflow May 14 HIGH E CVE-2021-29589 TFLite GatherNd: divide-by-zero crashes inference runtime 7.8 0.2% tensorflow May 14 HIGH E CVE-2021-29588 TensorFlow Lite: DoS/RCE via crafted model stride=0 7.8 0.2% tensorflow May 14 HIGH E CVE-2021-29587 TensorFlow TFLite: divide-by-zero via crafted model file 7.8 0.2% tensorflow May 14 HIGH E CVE-2021-29586 TFLite: div-by-zero in pooling crashes inference engine 7.8 0.2% tensorflow May 14 HIGH E CVE-2021-29585 TensorFlow TFLite: divide-by-zero crashes ML inference 7.8 0.2% tensorflow May 14 MEDI E CVE-2021-29584 TensorFlow: integer overflow DoS in SparseSplit op 5.5 0.2% tensorflow May 14 HIGH E CVE-2021-29583 TensorFlow: heap overflow in FusedBatchNorm risks RCE 7.8 0.2% tensorflow May 14 HIGH E CVE-2021-29582 TensorFlow: OOB heap read via Dequantize shape mismatch 7.1 0.2% tensorflow May 14 MEDI E CVE-2021-29581 TensorFlow: DoS via null buffer in CTCBeamSearchDecoder 5.5 0.2% tensorflow May 14 MEDI E CVE-2021-29580 TensorFlow: DoS via empty tensor in FractionalMaxPoolGrad 5.5 0.2% tensorflow May 14 HIGH E CVE-2021-29579 TensorFlow: heap buffer overflow in MaxPoolGrad kernel 7.8 0.2% tensorflow May 14 HIGH E CVE-2021-29578 TensorFlow: heap buffer overflow in FractionalAvgPoolGrad 7.8 0.2% tensorflow May 14 HIGH E CVE-2021-29577 TensorFlow: heap overflow in AvgPool3DGrad op 7.8 0.2% tensorflow May 14

Frequently asked questions

What is an AI security threat feed?

An AI security threat feed is a continuously updated stream of vulnerabilities (CVEs) affecting AI and machine-learning systems — LLM frameworks, ML libraries, AI agents, vector databases, and inference servers — filtered out of the broader CVE firehose and enriched for relevance.

Which sources are the AI CVEs tracked from?

CVEs are tracked from NVD, GitHub Advisory, CISA KEV, and MITRE ATLAS, then enriched with CVSS, EPSS, exploitation confidence, AI-component classification, and compliance mappings.

What AI systems do these vulnerabilities affect?

Coverage spans LLM frameworks, ML libraries, AI agents, vector databases, and inference servers — the components most security teams now run in production.

How often is the AI threat feed updated?

The feed updates continuously as new CVEs are published and enriched, so the most recent AI/ML vulnerabilities appear at the top.

Is the AI security feed free?

Yes — the public feed is free to browse. A Pro subscription adds breaking alerts, MITRE ATLAS mappings, compliance reports (ISO 42001, EU AI Act), and full CISO analysis.

Need deeper analysis?

Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.

Start 14-Day Free Trial