Known vulnerabilities in cURL 7.24.0

Software: cURL
Version: 7.24.0
Software CPE: cpe:2.3:a:curl_haxx_se:curl:*:*:*:*:*:*:*:*
Total vulnerabilities: 62
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting cURL version 7.24.0 cURL 7.24.0 is affected by 62 vulnerabilities: 8 high, 36 medium, 18 low Critical High Medium Low

Vulnerabilities (62)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135079 - Authentication Bypass by Primary Weakness
CVE-2026-8932
CWE-305 Low
No
No
8.21.0 24.06.2026 SB2026062427
#VU135077 - Authentication Bypass by Capture-replay
CVE-2026-8927
CWE-294 Low
No
No
8.21.0 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 3 more
#VU135075 - Authentication Bypass by Capture-replay
CVE-2026-11856
CWE-294 Medium
No
No
8.21.0 24.06.2026 SB2026062427
SB2026080303
SB2026080441
#VU128460 - Authentication Bypass by Primary Weakness
CVE-2026-5545
CWE-305 Medium
No
No
8.20.0 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 9 more
#VU128459 - Authentication Bypass by Capture-replay
CVE-2026-7168
CWE-294 Medium
No
No
8.20.0 29.04.2026 SB2026042955
SB2026050481
SB2026052287
and 8 more
#VU128456 - Exposure of sensitive information to an unauthorized actor
CVE-2026-6429
CWE-200 Medium
No
No
8.20.0 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 8 more
#VU128454 - Insufficiently Protected Credentials
CVE-2026-6253
CWE-522 Medium
No
No
8.20.0 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 8 more
#VU128445 - Cleartext Transmission of Sensitive Information
CVE-2026-4873
CWE-319 Medium
No
No
8.20.0 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 9 more
#VU123889 - Authentication Bypass by Primary Weakness
CVE-2026-3784
CWE-305 Medium
No
No
8.19.0 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 11 more
#VU123888 - Authentication Bypass by Primary Weakness
CVE-2026-1965
CWE-305 Medium
No
No
8.19.0 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 13 more
#VU121025 - Unsynchronized Access to Shared Data in a Multithreaded Context
CVE-2025-14017
CWE-567 Low
No
No
8.18.0 07.01.2026 SB2026010741
SB2026010915
SB2026010935
and 12 more
#VU103646 - Integer overflow
CVE-2025-0725
CWE-190 High
No
No
8.12.0 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 25 more
#VU101654 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11053
CWE-200 Low
No
No
8.11.1 11.12.2024 SB2024121137
SB2024121189
SB2024121190
and 32 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546
CWE-73 Low
No
No
8.4.0 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322
CWE-440 Medium
No
No
8.1.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321
CWE-295 Medium
No
No
8.1.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU76235 - Improper Synchronization
CVE-2023-28320
CWE-662 Low
No
No
8.1.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 28 more
#VU73828 - State Issues
CVE-2023-27535
CWE-371 Low
No
No
8.0.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more
#VU73827 - Improper input validation
CVE-2023-27534
CWE-20 Low
No
No
8.0.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 45 more
#VU73826 - Improper input validation
CVE-2023-27533
CWE-20 Low
No
No
8.0.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 42 more


Showing elements 1 - 20 out of 62