Known vulnerabilities in cURL 7.77.0 - page 4

Software: cURL
Version: 7.77.0
Software CPE: cpe:2.3:a:curl_haxx_se:curl:*:*:*:*:*:*:*:*
Total vulnerabilities: 84
Public exploits: 1
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting cURL version 7.77.0 cURL 7.77.0 is affected by 84 vulnerabilities: 2 high, 46 medium, 36 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155680 - Improper Certificate Validation
CVE-2026-87866
CWE-295 Medium
No
No
8.23.0 14.10.2026 SB2026101438
#VU155677 - Use After Free
CVE-2026-92388
CWE-416 Low
No
No
8.23.0 14.10.2026 SB2026101438
#VU155676 - Exposure of sensitive information to an unauthorized actor
CVE-2026-92389
CWE-200 Low
No
No
8.23.0 14.10.2026 SB2026101438
#VU155675 - External Control of File Name or Path
CVE-2026-92390
CWE-73 Low
No
No
8.23.0 14.10.2026 SB2026101438
#VU155674 - Uncontrolled Recursion
CVE-2026-92391
CWE-674 Low
No
No
8.23.0 14.10.2026 SB2026101438
#VU155671 - Insufficiently Protected Credentials
CVE-2026-94266
CWE-522 Low
No
No
8.23.0 14.10.2026 SB2026101438
#VU63008 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-27781
CWE-835 Medium
No
No
7.83.1 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 36 more
#VU62644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27776
CWE-200 Low
No
No
7.83.0 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 62 more
#VU62643 - Resource Management Errors
CVE-2022-27775
CWE-399 Low
No
No
7.83.0 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 30 more
#VU62641 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27774
CWE-200 Medium
No
No
7.83.0 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 57 more
#VU62640 - Improper Authentication
CVE-2022-22576
CWE-287 Medium
No
No
7.83.0 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 60 more
#VU61306 - Improper input validation
CVE-2022-22623
CWE-20 Medium
No
No
7.79.1 14.03.2022 SB2022031431
SB2022031433
#VU56615 - Insufficient Verification of Data Authenticity
CVE-2021-22947
CWE-345 Medium
No
No
7.79.0 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 43 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946
CWE-319 Medium
No
No
7.79.0 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more
#VU56610 - Double Free
CVE-2021-22945
CWE-415 Low
No
No
7.79.0 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 20 more
#VU55149 - Use of Uninitialized Variable
CVE-2021-22925
CWE-457 Medium
No
No
7.78.0 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 38 more
#VU55148 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-22922
CWE-611 Medium
No
No
7.78.0 21.07.2021 SB2021072108
SB2021072162
SB2021072204
and 27 more
#VU55147 - Improper Certificate Validation
CVE-2021-22926
CWE-295 Medium
No
No
7.78.0 21.07.2021 SB2021072108
SB2021072162
SB2021072814
and 11 more
#VU55146 - Improper Certificate Validation
CVE-2021-22924
CWE-295 Medium
No
No
7.78.0 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 33 more
#VU55145 - Insufficiently Protected Credentials
CVE-2021-22923
CWE-522 Medium
No
No
7.78.0 21.07.2021 SB2021072108
SB2021072162
SB2021072204
and 28 more


Showing elements 61 - 80 out of 84