Known vulnerabilities in MikTex

Vendor: Christian Schenk
Software: MikTex
Software CPE: cpe:2.3:a:chschenk:miktex:*:*:*:*:*:*:*:*
Website: https://profiles.wordpress.org/chschenk/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MikTex MikTex is affected by 9 known vulnerabilities: 3 high, 3 medium, 3 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118762 - Protection Mechanism Failure
CVE-2023-32668		 CWE-693 Medium
No
No
 23.5 25.11.2025 SB2023052504
SB2023052503
SB2023052505
and 1 more
#VU79310 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-25634		 CWE-22 Medium
No
No
 24.1 09.08.2023 SB2023080946
SB2023080947
SB2024031127
and 3 more
#VU76489 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-32700		 CWE-78 High
No
No
 23.5 25.05.2023 SB2023052503
SB2023052504
SB2023052505
and 13 more
#VU55854 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Medium
No
No
 21.8 16.08.2021 SB2021081603
#VU27968 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
 CWE-78 High
No
No
 2.9.7440 18.05.2020 SB2020051812
#VU19180 - Improper input validation
CVE-2017-12652		 CWE-20 Low
No
No
 2.9.7300 15.07.2019 SB2019071033
SB2020020613
SB2020093077
and 16 more
#VU18308 - Stack-based buffer overflow
CVE-2018-14550		 CWE-121 High
No
No
 2.9.7300 18.04.2019 SB2019041812
SB2019080303
SB2020020613
and 1 more
#VU17708 - Use After Free
CVE-2019-7317		 CWE-416 Low
No
No
 2.9.7300 14.02.2019 SB2019011606
SB2019041812
SB2019042401
and 46 more
#VU17017 - Missing release of memory after effective lifetime
CVE-2019-6129		 CWE-401 Low
No
No
 2.9.7300 16.01.2019 SB2019011606
SB2020020613