Known vulnerabilities in Calibre 9.9.0

Vendor: Calibre
Software: Calibre
Version: 9.9.0
Software CPE: cpe:2.3:a:calibre:calibre:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Calibre version 9.9.0 Calibre 9.9.0 is affected by 8 vulnerabilities: 2 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
9.14.0 02.09.2026 SB2026090257
#VU146755 - Heap-based Buffer Overflow
CWE-122 Low
No
No
9.13.0 02.09.2026 SB2026090258
#VU146754 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Medium
No
No
9.14.0 02.09.2026 SB2026090257
#VU146753 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
9.14.0 02.09.2026 SB2026090257
#VU146752 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
9.14.0 02.09.2026 SB2026090257
#VU146751 - External Control of File Name or Path
CWE-73 Medium
No
No
9.14.0 02.09.2026 SB2026090257
#VU140778 - Eval Injection
CVE-2026-73248
CWE-95 High
No
No
9.12.0 03.08.2026 SB2026080337
#VU135816 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-53511
CWE-94 High
No
No
9.10.0 29.06.2026 SB20260629109
SB2026071301
SB2026071302