BBloomberg

Products

Exploited and recent CVEs

• CVE-2026-32722 Low 3.6 Memray-generated HTML reports vulnerable to Stored XSS via unescaped command-line metadata 0.3%
• CVE-2025-36520 High 7.5 A null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A specially crafted network packets can lead to a denial of service 0.9%
• CVE-2025-46354 High 7.5 A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomberg Comdb2 8.1. A specially crafted network packet can lead to a denial of service 0.9%
• CVE-2025-48498 High 7.5 A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol 0.6%
• CVE-2025-36512 High 7.5 A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of ser 0.6%
• CVE-2025-35966 High 7.5 A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffer message can lead to a denial of servic 0.6%