Comparison Overview
Geometry Global

Geometry Global
636 11th Ave., New York, NY, 10036, US
Last Update: 09/03/2026
Geometry just got braver, bolder and bigger! We're amping up as WPP’s end-to-end Creative Commerce Company and joining forces with VMLYR in 2021. Visit www.vmlyrcommerce.com to see our new look, work and how we can partner! Geometry is WPP’s end-to-end Creative Commerc...

VML
3 WTC 175 Greenwich Street, New York, New York, US
Last Update: 15/09/2026
VML is a global powerhouse born from the unification of Wunderman Thompson and VMLY&R — two of the world's most powerful and accomplished creative agencies with complementary capabilities and geographic strengths. We have an industry-unique opportunity to provide our cl...
Compliance Ranges Comparison

Geometry Global







VML






Benchmark & Cyber Underwriting Signals
Incidents vs Advertising Services Industry Avg (This Year)
No incidents recorded for Geometry Global in 2026.
Incidents vs Advertising Services Industry Avg (This Year)
No incidents recorded for VML in 2026.
Incident History - Geometry Global (X = Date, Y = Severity)
Geometry Global cyber incidents detection timeline including parent company and subsidiaries.
Incident History - VML (X = Date, Y = Severity)
VML cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Geometry Global

VML
FAQ
Latest Global CVEs
Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.
- https://github.com/mistralai/mistral-vibe
- https://github.com/mistralai/mistral-vibe/blob/19b5b74faa78d0816b8d4d4c7d7543fc3520678c/vibe/core/git/repo.py#L411-L431
- https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553
- https://github.com/mistralai/mistral-vibe/issues/996
- https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5
- https://www.vulncheck.com/advisories/mistral-vibe-before-2.25.5-remote-code-execution-via-git-post-checkout