Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Carbonblack

First CVE: Apr 22, 2014Active for: 12 yearsTotal CVEs: 5

Carbonblack develops endpoint detection and response (EDR) and threat-intelligence products that operate across enterprise security infrastructure, with its vulnerability footprint centered on the core Carbon Black platform. The observed weakness classes—including out-of-bounds reads, cross-site request forgery, cryptographic-signature verification flaws, and NULL-pointer dereferences—span both memory-safety and authentication-boundary concerns typical of security-focused software. Current severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
5
Total CVEs
More Total CVEs than 83% of tracked vendors
1.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 74% of tracked vendors
6.8
Avg CVSS Score
Higher Avg CVSS Score than 45% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Carbonblack over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 22, 2014
12 years ago
Most Recent CVE
Jun 13, 2018
2,963 days ago

Products(2 total)

Top CVEs

Signals from CVEs in this vendor scope (5 CVEs).

5 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2016-9568CRITICAL
A security design issue can allow an unprivileged user to interact with the Carbon Black Sensor and perform unauthorized actions.
Feb 19, 20189.830NONO
CVE-2016-9570HIGH
cb.exe in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service (out-of-bounds read, invalid pointer dereference, and application crash) by leveraging access to th
Feb 12, 20187.523NONO
CVE-2014-1615MEDIUM
Multiple cross-site request forgery (CSRF) vulnerabilities in Carbon Black before 4.1.0 allow remote attackers to hijack the authentication of administrators for requests that add
Apr 22, 20146.821NONO
CVE-2018-10407MEDIUM
An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the
Jun 13, 20185.517NONO
CVE-2016-9569MEDIUM
The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of service (out-of-bounds read and system crash) via a large counter
Feb 12, 20184.417NONO
View all 5 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products5 CVEs
60%
20%
20%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (40.0%)
Network2 (40.0%)
Unknown1 (20.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (80.0%)
High0 (0.0%)
Unknown1 (20.0%)
User Interaction
None3 (60.0%)
Unknown1 (20.0%)
Required1 (20.0%)
Privileges Required
Low0 (0.0%)
High1 (20.0%)
None3 (60.0%)
Unknown1 (20.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (5 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Carbonblack.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Carbonblack — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Carbonblack's Products

View all 1 CNAs →

Top CWEs