How many Go toolchain cmd/compile CVEs are in CISA KEV?

None of Go toolchain cmd/compile's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Go toolchain cmd/compile are affected?

4 distinct Go toolchain cmd/compile versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

How many critical Go toolchain cmd/compile vulnerabilities are there?

Go toolchain cmd/compile has 1 critical and 1 high-severity CVEs.

What is the average severity of Go toolchain cmd/compile CVEs?

The average CVSS base score across Go toolchain cmd/compile's scored CVEs is 8.4.

Go toolchain cmd/compile Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Go toolchain cmd/compile vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Go toolchain cmd/compile Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Go toolchain cmd/compile has 2 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Go toolchain cmd/compile, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Go toolchain cmd/compile's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Go toolchain cmd/compile's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Go toolchain cmd/compile CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Go toolchain cmd/compile version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.25.92 CVEs
1.26.0-0 <= v < 1.26.22 CVEs

Fixed in

1.25.92 CVEs
1.26.22 CVEs

Find a version

2 CVEs

Sort

Missing bound checks can lead to memory corruption in safe Go in cmd/compile
CVE-2026-27143
Patch
Critical · CVSS 9.8
EPSS 0.5% (43th pct)2026-04-08
Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile
CVE-2026-27144
Patch
High · CVSS 7.1
EPSS 0.3% (18th pct)2026-04-08

Other Go toolchain products

Browse vulnerabilities for other products by Go toolchain.

cmd/go21 CVEs cmd/cgo3 CVEs cmd\/go1 CVEs

All Go toolchain vulnerabilities

Frequently asked questions

Common questions about Go toolchain cmd/compile vulnerabilities.

How many CVEs does Go toolchain cmd/compile have?: Go toolchain cmd/compile has 2 published CVE records since 2026.
How many Go toolchain cmd/compile CVEs are in CISA KEV?: None of Go toolchain cmd/compile's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Go toolchain cmd/compile vulnerabilities?: No Go toolchain cmd/compile CVEs currently have a tracked public exploit in this dataset.
Which versions of Go toolchain cmd/compile are affected?: 4 distinct Go toolchain cmd/compile versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
How many critical Go toolchain cmd/compile vulnerabilities are there?: Go toolchain cmd/compile has 1 critical and 1 high-severity CVEs.
What is the average severity of Go toolchain cmd/compile CVEs?: The average CVSS base score across Go toolchain cmd/compile's scored CVEs is 8.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Go toolchain cmd/compile vulnerabilities

Monitor new Go toolchain cmd/compile vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing