Ethereum vulnerabilities

Products

• Go Ethereum 25
• Go-ethereum 16
• Cpp-ethereum 7
• Ethereum 5
• Aleth 2
• Web3.py 2

Newest

• apeworx web3.py web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling CVE-2026-40072 Public exploitFix available 1.7 LowApril 4, 2026
• ethereum web3.py Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass CVE-2026-111171 6.3 MediumApril 4, 2026
• ethereum go-ethereum, go ethereum +1 more Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake CVE-2026-26315 Fix available 6.9 MediumFebruary 18, 2026
• ethereum go-ethereum, go ethereum +1 more Go Ethereum affected by DoS via malicious p2p message CVE-2026-26314 Fix available 8.7 HighFebruary 18, 2026
• ethereum go-ethereum, go ethereum +1 more Go Ethereum affected by DoS via malicious p2p message CVE-2026-26313 Fix available 6.9 MediumFebruary 18, 2026
• ethereum go-ethereum, go ethereum +1 more go-ethereum has a DoS via malicious p2p message CVE-2026-22868 Fix available 7.1 HighJanuary 13, 2026
• ethereum go-ethereum, go ethereum +1 more go-ethereum has a DoS via malicious p2p message CVE-2026-22862 Public exploitFix available 7.1 HighJanuary 13, 2026
• ethereum rlpx RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption... CVE-2015-20112 3.4 LowJune 29, 2025
• ethereum go-ethereum go-ethereum has a DoS via malicious p2p message CVE-2025-24883 Fix available 8.7 HighJanuary 30, 2025
• ethereum An issue in Ethereum v.1.12.2 allows remote attacker to execute arbitrary code via the PepeGxng... CVE-2024-51427 Disputed 9.8 CriticalOctober 30, 2024
• ethereum Insecure Permissions vulnerability in Ethereum v.1.12.2 allows a remote attacker to escalate... CVE-2024-51426 Disputed 8.8 HighOctober 30, 2024
• ethereum Insecure Permissions vulnerability in Ethereum v.1.12.2 allows a remote attacker to escalate... CVE-2024-51425 Disputed 8.8 HighOctober 30, 2024
• ethereum An issue in Ethereum v.1.12.2 allows remote attacker to execute arbitrary code via the Owned... CVE-2024-51424 Disputed 9.8 CriticalOctober 30, 2024
• ethereum go-ethereum, go ethereum +1 more go-ethereum denial of service via malicious p2p message CVE-2024-32972 Fix available 7.5 HighMay 6, 2024
• ethereum go ethereum go-ethereum vulnerable to denial of service via crafted GraphQL query CVE-2023-42319 7.5 HighOctober 18, 2023
• ethereum blockchain An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the... CVE-2023-36980 5.3 MediumSeptember 11, 2023
• ethereum go-ethereum, go ethereum +1 more Denial of service via malicious p2p message in go-ethereum CVE-2023-40591 Fix available 7.5 HighSeptember 6, 2023
• eth-account ReDoS in eth-account encode_structured_data function CVE-2022-1930 Fix available 5.9 MediumAugust 22, 2022
• ethereum go ethereum Go Ethereum allows attackers to use manipulation of time-difference values to achieve replacement of main-chain blocks CVE-2022-37450 Fix available 5.9 MediumAugust 5, 2022
• ethereum go-ethereum, go ethereum +1 more DoS via malicious p2p message in Go-Ethereum CVE-2022-29177 Fix available 5.9 MediumMay 20, 2022
• ethereum go ethereum Denial of service in go-ethereum CVE-2021-42219 7.5 HighMarch 16, 2022
• ethereum go ethereum Denial of Service in Go-Ethereum CVE-2022-23328 7.5 HighMarch 4, 2022
• ethereum go ethereum Denial of Service in Go-Ethereum CVE-2022-23327 7.5 HighMarch 4, 2022
• ethereum go ethereum Denial of Service in Go-Ethereum CVE-2021-43668 5.5 MediumNovember 18, 2021
• ethereum go ethereum, go-ethereum +1 more DoS via maliciously crafted p2p message CVE-2021-41173 Fix available 5.7 MediumOctober 25, 2021
• ethereum go-ethereum, go ethereum +1 more Consensus flaw during block processing in go-ethereum CVE-2021-39137 Fix available 6.5 MediumAugust 24, 2021
• ethereum aleth A stack overflow vulnerability in Aleth Ethereum C++ client version <= 1.8.0 using a specially... CVE-2020-26800 5.5 MediumJanuary 11, 2021
• ethereum go ethereum, go-ethereum +1 more LES Server DoS via GetProofsV2 CVE-2020-26264 Fix available 6.5 MediumDecember 11, 2020
• ethereum go ethereum, go-ethereum +1 more Consensus flaw during block processing CVE-2020-26265 Fix available 5.3 MediumDecember 11, 2020
• ethereum, talos cpp-ethereum +1 more An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of... CVE-2017-14451 10.0 CriticalDecember 2, 2020
• ethereum go ethereum, go-ethereum +1 more Erroneous Proof of Work calculation in geth CVE-2020-26240 Fix available 5.3 MediumNovember 25, 2020
• ethereum go ethereum, go-ethereum +1 more Shallow copy bug in geth CVE-2020-26241 Fix available 6.5 MediumNovember 25, 2020
• ethereum go ethereum, go-ethereum +1 more Denial of service in geth CVE-2020-26242 Fix available 6.5 MediumNovember 25, 2020
• ethereum ethereumj Deserialization of Untrusted Data in EthereumJ CVE-2018-15890 9.8 CriticalJune 20, 2019
• ethereum go ethereum Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption)... CVE-2018-20421 7.5 HighDecember 24, 2018
• ethereum go ethereum Go Ethereum Denial of Service CVE-2018-19184 Fix available 7.5 HighNovember 12, 2018
• ethereum py-evm Py-EVM is vulnerable to arbitrary bytecode injection CVE-2018-18920 Fix available 8.8 HighNovember 12, 2018
• ethereum go ethereum Go Ethereum Improper Input Validation CVE-2018-16733 Fix available 7.5 HighSeptember 8, 2018
• ethereum go ethereum Go Ethereum LES protocol implementation vulnerable to Denial of Service CVE-2018-12018 Public exploitFix available 7.5 HighJuly 5, 2018
• ethereum virtual machine, talos cpp-ethereum +1 more An exploitable information leak/denial of service vulnerability exists in the libevm (Ethereum... CVE-2017-14457 8.2 HighJanuary 19, 2018
• ethereum cpp-ethereum An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC... CVE-2017-12119 7.5 HighJanuary 19, 2018
• ethereum cpp-ethereum An exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's... CVE-2017-12118 4.0 MediumJanuary 19, 2018
• talos cpp-ethereum, ethereum aleth +1 more An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp... CVE-2017-12116 6.8 MediumJanuary 19, 2018
• ethereum cpp-ethereum An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum... CVE-2017-12113 4.0 MediumJanuary 19, 2018
• ethereum cpp-ethereum An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's... CVE-2017-12117 4.0 MediumJanuary 19, 2018
• ethereum cpp-ethereum An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp... CVE-2017-12115 6.8 MediumJanuary 19, 2018
• ethereum cpp-ethereum An exploitable improper authorization vulnerability exists in admin_peers API of cpp-ethereum's... CVE-2017-12114 4.0 MediumJanuary 19, 2018
• ethereum cpp-ethereum An exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's... CVE-2017-12112 4.0 MediumJanuary 19, 2018