CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 3:50 PM ET)

What this means for you

This week: 3,233 CVEs published, 237 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,233; Show in the list
Critical, last 7 days: 237; Show in the list
Healthcare-tagged, last 7 days: 6; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product invisible-island:ncurses. Show all products

11 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2019-17595	Medium 5.4	There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012. Assigned by mitre	Oct 14, 2019
CVE-2019-17594	Medium 5.3	There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012. Assigned by mitre	Oct 14, 2019
CVE-2021-39537	High 8.8	An issue was discovered in ncurses through v6.2-1. Assigned by mitre	Sep 19, 2021
CVE-2023-29491	High 7.8	ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME… Assigned by mitre	Apr 13, 2023
CVE-2020-19190	Medium 6.5	Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. Assigned by mitre	Aug 21, 2023
CVE-2020-19189	Medium 6.5	Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. Assigned by mitre	Aug 21, 2023
CVE-2020-19185	Medium 6.5	Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. Assigned by mitre	Aug 21, 2023
CVE-2020-19187	Medium 6.5	Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. Assigned by mitre	Aug 21, 2023
CVE-2020-19186	Medium 6.5	Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. Assigned by mitre	Aug 21, 2023
CVE-2020-19188	Medium 6.5	Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. Assigned by mitre	Aug 21, 2023

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.