Known vulnerabilities in Apache Xerces C++

Vendor: Apache Foundation
Software: Apache Xerces C++
Software CPE: cpe:2.3:a:apache_foundation:xerces-c_plus_plus:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 36
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Xerces C++ Apache Xerces C++ is affected by 36 known vulnerabilities: 6 high, 19 medium, 11 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86623 - Use After Free
CVE-2024-23807		 CWE-416 High
No
No
 3.2.5 20.02.2024 SB2024022032
SB2024062836
SB2024071042
and 24 more
#VU83515 - Integer overflow
CVE-2023-37536		 CWE-190 Medium
No
No
 3.2.4 27.11.2023 SB2023112767
SB2023112803
SB2023112809
and 28 more
#VU24140 - Use After Free
CVE-2018-1311		 CWE-416 High
No
No
 3.2.5 08.01.2020 SB2019121828
SB2020030618
SB2020030619
and 31 more
#VU32092 - Heap-based Buffer Overflow
CVE-2017-5931		 CWE-122 High
No
No
 - 27.03.2017 SB2017032703
SB2017061636
SB2017022105
#VU32084 - Missing release of memory after effective lifetime
CVE-2017-5856		 CWE-401 Medium
No
No
 - 16.03.2017 SB2017031626
SB2017061633
SB2017022105
#VU32085 - Missing release of memory after effective lifetime
CVE-2017-5857		 CWE-401 Medium
No
No
 - 16.03.2017 SB2017031627
SB2017061634
SB2017022105
#VU32091 - Out-of-bounds read
CVE-2017-5667		 CWE-125 Low
No
No
 - 16.03.2017 SB2017031628
SB2017061632
SB2017022105
#VU32078 - Missing release of memory after effective lifetime
CVE-2016-10155		 CWE-401 Medium
No
No
 - 15.03.2017 SB2017031513
SB2017061617
SB2017022105
#VU32080 - Missing release of memory after effective lifetime
CVE-2017-5525		 CWE-401 Medium
No
No
 - 15.03.2017 SB2017031514
SB2017061628
SB2017022105
#VU32081 - Missing release of memory after effective lifetime
CVE-2017-5552		 CWE-401 Medium
No
No
 - 15.03.2017 SB2017031515
SB2017061629
SB2017022105
#VU32082 - Missing release of memory after effective lifetime
CVE-2017-5578		 CWE-401 Medium
No
No
 - 15.03.2017 SB2017031516
SB2017061630
SB2017022105
#VU32083 - Missing release of memory after effective lifetime
CVE-2017-5579		 CWE-401 Medium
No
No
 - 15.03.2017 SB2017031517
SB2017061631
SB2017022105
and 2 more
#VU32129 - Missing release of memory after effective lifetime
CVE-2016-7995		 CWE-401 Medium
No
No
 - 10.12.2016 SB2016121009
SB2017041809
#VU32128 - Missing release of memory after effective lifetime
CVE-2016-7994		 CWE-401 Medium
No
No
 - 10.12.2016 SB2016121008
SB2017041808
#VU32090 - Missing release of memory after effective lifetime
CVE-2016-9106		 CWE-401 Medium
No
No
 - 10.12.2016 SB2016121007
SB2017061627
SB2016103001
and 2 more
#VU32089 - Missing release of memory after effective lifetime
CVE-2016-9105		 CWE-401 Medium
No
No
 - 10.12.2016 SB2016121006
SB2017061626
SB2016103001
and 2 more
#VU32088 - Out-of-bounds read
CVE-2016-9104		 CWE-125 Low
No
No
 - 10.12.2016 SB2016121005
SB2017061625
SB2016103001
and 2 more
#VU32087 - Memory corruption
CVE-2016-9103		 CWE-119 Low
No
No
 - 10.12.2016 SB2016121004
SB2017061624
SB2016103001
and 2 more
#VU32079 - Missing release of memory after effective lifetime
CVE-2016-9102		 CWE-401 Medium
No
No
 - 10.12.2016 SB2016121002
SB2017061623
SB2016103001
and 2 more
#VU32086 - Missing release of memory after effective lifetime
CVE-2016-9101		 CWE-401 Medium
No
No
 - 10.12.2016 SB2016121003
SB2017061622


Showing elements 1 - 20 out of 36