https://vulnogram.org/ Most recent CVEs assigned by Wind River Systems Inc. (windriver). https://vulnogram.org/seaview/icons/windriver.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-104018 https://vulnogram.org/CVE-2026-104018 An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privileges. Under certain shell operations, a command may be evaluated without the privilege chec… High Thu, 01 Oct 2026 17:35:20 GMT https://vulnogram.org/CVE-2026-102006 https://vulnogram.org/CVE-2026-102006 In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09 Medium Mon, 28 Sep 2026 20:46:35 GMT https://vulnogram.org/CVE-2026-102005 https://vulnogram.org/CVE-2026-102005 Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in Vx… Medium Mon, 28 Sep 2026 20:15:52 GMT https://vulnogram.org/CVE-2026-102004 https://vulnogram.org/CVE-2026-102004 Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09 High Mon, 28 Sep 2026 19:47:18 GMT https://vulnogram.org/CVE-2026-97686 https://vulnogram.org/CVE-2026-97686 Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09. Medium Mon, 28 Sep 2026 18:48:23 GMT https://vulnogram.org/CVE-2025-26503 https://vulnogram.org/CVE-2025-26503 A crafted system call argument can cause memory corruption. Medium Thu, 18 Sep 2025 18:46:44 GMT https://vulnogram.org/CVE-2025-26499 https://vulnogram.org/CVE-2025-26499 Under heavy system utilization a random race condition can occur during authentication or token refresh operation. This flaw allows one user to be granted a token intended for another user, resulting in impersonation until the session is ended. This… Medium Thu, 11 Sep 2025 16:46:28 GMT https://vulnogram.org/CVE-2025-26500 https://vulnogram.org/CVE-2025-26500 : Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation. Specifically crafted USB packets may lead to the system becoming unavailable This issue affects VxWorks 7: from 22.06 through 24… Medium Fri, 21 Mar 2025 22:20:36 GMT