Squirrel
Vendor:
First CVE: May 4, 2022 · Active for 4 years
7
Total CVEs
More Total CVEs than 83% of tracked products
3.5
Avg CVEs / Year
Higher CVE frequency than 82% of tracked products
7.4
Avg CVSS
Higher Avg CVSS than 49% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Squirrel over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 4, 2022
4 years ago
Most Recent CVE
May 26, 2026
59 days ago
CVE Severity & Scoring
Squirrel7 CVEs
43%
29%
29%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local5 (71.4%)
Network2 (28.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None7 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low5 (71.4%)
High0 (0.0%)
None2 (28.6%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-41556CRITICAL sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Execution. If a victim executes an attacker-c | Jul 28, 2022 | 10.0 | 32 | NO | NO |
CVE-2026-9541MEDIUM A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the component Cnut File Handler. Performing a ma | May 26, 2026 | 5.3 | 25 | NO | NO |
CVE-2022-30292CRITICAL Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call. | May 4, 2022 | 10.0 | 25 | NO | NO |
CVE-2026-2659HIGH A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTarget of the file src/squirrel/squirrel/sqfuncstate.cpp. Execu | Feb 18, 2026 | 7.8 | 24 | NO | NO |
CVE-2026-2661HIGH A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the library squirrel/sqobject.h. The manipulation results in heap-base | Feb 18, 2026 | 7.8 | 23 | NO | NO |
CVE-2026-3389MEDIUM A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the library sqstdlib/sqstdrex.cpp. Executing a manipulation can l | Mar 1, 2026 | 5.5 | 21 | NO | NO |
CVE-2026-3388MEDIUM A vulnerability was found in Squirrel up to 3.2. This affects the function SQCompiler::Factor/SQCompiler::UnaryOP of the file squirrel/sqcompiler.cpp. Performing a manipulation res | Mar 1, 2026 | 5.5 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Squirrel
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.2 | 1 | 10.0 | 3.5% | 0 | 0 |