How many CVEs does SanDisk have?

SanDisk has 24 published CVE records since 2010, including 0 in the last two years.

How many SanDisk CVEs are in CISA KEV?

None of SanDisk's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which SanDisk products have the most CVEs?

The SanDisk products with the most published CVEs are ibi, cruzer enterprise usb, ssd dashboard, ibi web app, secureaccess.

What are the most common weakness types in SanDisk CVEs?

SanDisk's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-427 (Uncontrolled Search Path Element), CWE-255, CWE-400 (Uncontrolled Resource Consumption).

Are there public exploits for SanDisk vulnerabilities?

No SanDisk CVEs currently have a tracked public exploit in this dataset.

How many critical SanDisk vulnerabilities are there?

SanDisk has 2 critical and 9 high-severity CVEs.

What is the average severity of SanDisk CVEs?

The average CVSS base score across SanDisk's scored CVEs is 6.5.

RadicalNotion.AI

Log in Create an account

24 CVEs

SanDisk Vulnerabilities

Name: SanDisk vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for SanDisk.

24

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.5

Avg CVSS

2010–2024

Overview

SanDisk has 24 published CVE records since 2010, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

Security scorecard

A quick read on SanDisk's vulnerability posture, as a share of its 24 published CVEs.

Average CVSS: 6.5
Critical / high: 46%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 83%

Severity and exploitation

How the CVSS severity of SanDisk's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High9

Medium13

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of SanDisk's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No SanDisk CVEs currently have a tracked public exploit.

Most affected products

The SanDisk products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in SanDisk CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish SanDisk CVE records.

Disclosure activity by year

How many SanDisk CVEs were published each year.

2010

3

2017

1

2019

2

2021

1

2022

4

2023

9

2024

4

Latest SanDisk CVEs

The most recently disclosed vulnerabilities affecting SanDisk.

Medium vulnerability · 2024-06-24
CWE-79
Medium · CVSS 5.9
EPSS 0.3%2024-06-24
High vulnerability · 2024-03-13
CWE-427
High · CVSS 7.9
EPSS 0.2%2024-03-13
Medium vulnerability · 2024-02-05
CWE-770
Medium · CVSS 4.9
EPSS 0.8%2024-02-05
Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
CWE-918
Medium · CVSS 5.5
EPSS 0.2%2024-02-05
High vulnerability · 2023-11-15
CWE-427
High · CVSS 7.8
EPSS 0.2%2023-11-15
Critical vulnerability · 2023-06-12
CWE-290
Critical · CVSS 10.0
EPSS 0.6%2023-06-12
Medium vulnerability · 2023-05-18
CWE-22
Medium · CVSS 5.8
EPSS 0.8%2023-05-18
Critical vulnerability · 2023-05-18
CWE-22
Critical · CVSS 9.8
EPSS 1.5%2023-05-18
Medium vulnerability · 2023-05-18
CWE-400
Medium · CVSS 4.9
EPSS 0.6%2023-05-18
High vulnerability · 2023-05-10
CWE-400
High · CVSS 7.5
EPSS 0.3%2023-05-10
High vulnerability · 2023-05-09
CWE-120
High · CVSS 8.1
EPSS 0.6%2023-05-09
Device API endpoint missing access controls on Western Digital Mobile and Web Apps
CWE-200
Medium · CVSS 4.3
EPSS 0.5%2023-05-08

Get an alert for each new SanDisk CVE, with AI-written analysis and remediation steps.

Monitor SanDisk CVEs

Other vendors

CVE counts for other vendors.

microsoft41,739 CVEs linux25,260 CVEs Google17,495 CVEs Apple15,495 CVEs Oracle13,348 CVEs Debian10,233 CVEs IBM9,452 CVEs Red Hat8,581 CVEs

Browse all vendors

Frequently asked questions

Common questions about SanDisk vulnerabilities.

How many CVEs does SanDisk have?: SanDisk has 24 published CVE records since 2010, including 0 in the last two years.
How many SanDisk CVEs are in CISA KEV?: None of SanDisk's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which SanDisk products have the most CVEs?: The SanDisk products with the most published CVEs are ibi, cruzer enterprise usb, ssd dashboard, ibi web app, secureaccess.
What are the most common weakness types in SanDisk CVEs?: SanDisk's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-427 (Uncontrolled Search Path Element), CWE-255, CWE-400 (Uncontrolled Resource Consumption).
Are there public exploits for SanDisk vulnerabilities?: No SanDisk CVEs currently have a tracked public exploit in this dataset.
How many critical SanDisk vulnerabilities are there?: SanDisk has 2 critical and 9 high-severity CVEs.
What is the average severity of SanDisk CVEs?: The average CVSS base score across SanDisk's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track SanDisk vulnerabilities

Get an alert for each new SanDisk CVE, with AI-written analysis and remediation steps.

Create an account See pricing