Vulnerabilidades em ZcashFoundation
52 resultadosAnálise Vexday
A Zcash Foundation apresenta 13 vulnerabilidades catalogadas, com 8 publicadas nos últimos 90 dias, indicando atividade recente de descoberta. Nenhuma vulnerabilidade está sob exploração ativa conforme CISA KEV, mas 6 são críticas (CVSS alto), predominantemente relacionadas a CWE-770 (alocação de recursos sem limite). O risco atual é moderado, concentrado em gestão deficiente de recursos que pode levar a negação de serviço ou consumo excessivo.
CVE-2026-104423HIGHZebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof VerificationEPSS 0.3%CVE-2026-123558HIGHZebra before 7.0.0 Checkpoint Sync Denial of Service via Cancelled Verifier RewindEPSS 0.3%CVE-2026-54496CRITICALMissing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundnessEPSS 0.3%CVE-2026-104427HIGHZebra before 6.1.0 Chain Stall via Stale parent_error_map EntryEPSS 0.3%CVE-2026-123557HIGHZebra zebrad before 7.0.0 Reachable Assertion DoS via Peer DisconnectionEPSS 0.3%CVE-2026-104426HIGHZebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value CheckEPSS 0.3%CVE-2026-104434HIGHZebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPCEPSS 0.3%CVE-2025-58359MEDIUMfrost-core: refresh shares with smaller min_signers will reduce group securityEPSS 0.3%CVE-2026-104425MEDIUMZebra before 6.1.0 Batch-Verification Poisoning DoS via Unattributed Pushed TransactionsEPSS 0.3%CVE-2026-104421MEDIUMZebra before 6.2.1 Block Download Denial of Service via KnownBlock SentHashes LockoutEPSS 0.3%CVE-2026-104432MEDIUMZebra before 6.3.0 False Readiness via Discarded One-Hash FindBlocks ResponseEPSS 0.3%CVE-2026-104420MEDIUMZebra before 6.3.0 Peer Misbehavior Ban Bypass via Gossiped BlocksEPSS 0.3%CVE-2026-123556MEDIUMZebra 4.5.0 before 7.0.0 Honest Peer Ban via Mempool Lock-Time ScoringEPSS 0.3%CVE-2026-104429MEDIUMZebra before 6.0.0-rc.0 Per-Peer Mempool Admission Bypass via P2P tx MessagesEPSS 0.3%CVE-2026-44498CRITICALZEBRA: Block Validator Undercounts Coinbase and P2SH SigopsEPSS 0.3%CVE-2026-41583CRITICALZEBRA: Consensus Divergence in Transparent Sighash Hash-Type HandlingEPSS 0.3%CVE-2026-104424MEDIUMZebra before 6.1.0 Incorrect Block Size Calculation in getblocktemplateEPSS 0.3%CVE-2026-104436MEDIUMZebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator LengthEPSS 0.3%CVE-2026-41584CRITICALZEBRA: rk Identity Point Panic in Transaction VerificationEPSS 0.3%CVE-2026-40881MEDIUMZebra: addr/addrv2 Deserialization Resource ExhaustionEPSS 0.3%