grpc
Security Risk Profile
33
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 20 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 14, 2017 to present
20
Total CVEs
13
Critical+High
1
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
7.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
33/100
low
⚠️ 1 Active Exploits⚡ 1 Zero-Days📈 2 in Last 30 Days
Severity Distribution
Critical
6High
7Medium
6Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
2
2
Input Validation
1
3
Use After Free
1
Most Affected Products
1. gRPC gRPC32
2. Microsoft Windows 1022
3. Apache Tomcat14
4. rubygems/grpc10
5. pip/grpcio9
Recent Vulnerabilities
See more →CVE-2026-18618
CVSS 7.5high
Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener
8/3/2026🔧 No Patch
REDHAT-BUG-2510313
CVSS 4.0medium
8/3/2026🔧 No Patch
CVE-2026-33186
CVSS 9.1EPSS 0%critical
gRPC-Go has an authorization bypass via missing leading slash in :path
3/18/2026
REDHAT-BUG-2329003
CVSS 4.0medium
11/26/2024🔧 No Patch
CVE-2024-11407
CVSS 7.5high
Denial of Service through Data corruption in gRPC-C++
11/26/2024
CVE-2024-7246
CVSS 6.3EPSS 0%medium
HPACK table poisoning in gRPC C++, Python & Ruby
8/6/2024
https://seclists.org/oss-sec/2023/q4/144
unknown
CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations
10/18/2023🔧 No Patch
CVE-2023-44487
CVSS 7.5high
- Rapid Reset HTTP/2 vulnerability
10/9/2023⚠ Exploited⚡ Zero-Day
CVE-2023-4785
CVSS 7.5high
Denial of Service in gRPC Core
9/13/2023
CVE-2023-33953
CVSS 7.5high
Denial-of-Service in gRPC
8/9/2023
Monitor grpc in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.