Mumble records
8 published records for vendor mumble.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation2
- CWE-125 Out-of-bounds Read1
- CWE-19 Data Processing Errors1
- CWE-310 Cryptographic Issues1
- CWE-399 Resource Management Errors1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2021-27229No exploit | Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage textmumble · mumble · CWE-59 | High8.8 | — | 3.2% | Feb 16, 2021 |
31Monitor | CVE-2018-20743No exploit | murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows rmumble · mumble · CWE-20 | High7.5 | — | 3.6% | Jan 25, 2019 |
31Monitor | CVE-2020-13962No exploit | Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can causemumble · mumble | High7.5 | — | 3.0% | Jun 8, 2020 |
26Monitor | CVE-2010-2490No exploit | Mumble: murmur-server has DoS due to malformed client querymumble · mumble · CWE-20 | Medium6.5 | — | 1.6% | Oct 31, 2019 |
21Monitor | CVE-2014-3755No exploit | The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resoumumble · mumble · CWE-399 | Medium5.0 | — | 2.5% | Nov 16, 2014 |
21Monitor | CVE-2025-71264No exploit | Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash).mumble · mumble · CWE-125 | Medium5.3 | — | 0.3% | Mar 16, 2026 |
20Monitor | CVE-2014-3756No exploit | The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service (hangmumble · mumble · CWE-19 | Medium5.0 | — | 1.5% | Nov 16, 2014 |
8Monitor | CVE-2012-0863No exploit | Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might mumble · mumble · CWE-310 | Low2.1 | — | 0.4% | Apr 30, 2012 |
- CVE-2021-2722936Monitor
Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text
HighCVSS 8.8No exploitEPSS 3%mumble · mumbleFeb 16, 2021
- CVE-2018-2074331Monitor
murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows r
HighCVSS 7.5No exploitEPSS 4%mumble · mumbleJan 25, 2019
- CVE-2020-1396231Monitor
Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause
HighCVSS 7.5No exploitEPSS 3%mumble · mumbleJun 8, 2020
- CVE-2010-249026Monitor
Mumble: murmur-server has DoS due to malformed client query
MediumCVSS 6.5No exploitEPSS 2%mumble · mumbleOct 31, 2019
- CVE-2014-375521Monitor
The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resou
MediumCVSS 5.0No exploitEPSS 3%mumble · mumbleNov 16, 2014
- CVE-2025-7126421Monitor
Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash).
MediumCVSS 5.3No exploitEPSS 0%mumble · mumbleMar 16, 2026
- CVE-2014-375620Monitor
The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service (hang
MediumCVSS 5.0No exploitEPSS 1%mumble · mumbleNov 16, 2014
- CVE-2012-08638Monitor
Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might
LowCVSS 2.1No exploitEPSS 0%mumble · mumbleApr 30, 2012