Known vulnerabilities in curl
Vendor:
Fedoraproject
Software:
curl
Software CPE:
cpe:2.3:o:fedoraproject:curl:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
137
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
8.18.0-14.fc44
8.21.0-8.fc45
8.18.0-13.fc44
8.15.0-11.fc43
8.18.0-12.fc44
8.21.0-7.fc45
8.18.0-11.fc44
8.21.0-6.fc45
8.15.0-10.fc43
8.18.0-10.fc44
8.15.0-9.fc43
8.18.0-9.fc44
8.15.0-8.fc43
8.18.0-8.fc44
8.21.0~rc2-2.fc45
8.15.0-7.fc43
8.11.1-8.fc42
8.15.0-6.fc43
8.18.0-6.fc44
8.11.1-6.fc42
8.9.1-4.fc41
7.69.1-7.fc32
7.71.1-8.fc33
7.66.0-3.fc31
7.69.1-5.fc32
7.69.1-4.fc32
7.66.0-2.fc31
7.61.1-12.fc29
7.65.3-4.fc30
7.66.0-1.fc31
7.64.0-7.fc30
7.61.1-11.fc29
7.61.1-8.fc29
7.61.1-7.fc29
7.61.1-5.fc29
7.59.0-9.fc28
7.61.1-4.fc29
7.59.0-8.fc28
7.59.0-7.fc28
7.61.1-1.fc29
7.55.1-14.fc27
7.59.0-5.fc28
7.59.0-3.fc28
7.55.1-11.fc27
7.53.1-16.fc26
7.55.1-10.fc27
7.59.0-2.fc28
7.59.0-1.fc28
7.53.1-14.fc26
7.55.1-9.fc27
7.53.1-13.fc26
7.55.1-8.fc27
7.53.1-12.fc26
7.55.1-7.fc27
7.55.1-6.fc27
7.53.1-11.fc26
7.51.0-9.fc25
7.53.1-10.fc26
7.53.1-6.fc26
7.53.1-4.fc26
7.51.0-6.fc25
7.47.1-10.fc24
7.51.0-4.fc25
7.51.0-1.fc25
7.47.1-9.fc24
7.47.1-8.fc24
7.50.3-1.fc25
7.43.0-10.fc23
7.47.1-6.fc24
7.43.0-8.fc23
7.43.0-5.fc23
7.40.0-8.fc22
7.40.0-5.fc22
7.37.0-14.fc21
7.40.0-3.fc22
7.37.0-12.fc21
7.37.0-11.fc21
7.37.0-9.fc21
7.37.0-7.fc21
7.85.0-5.fc37
7.82.0-12.fc36
7.85.0-2.fc37
7.79.1-7.fc35
7.82.0-9.fc36
7.82.0-8.fc36
7.79.1-6.fc35
7.85.0-1.fc37
7.84.0-3.fc37
7.82.0-6.fc36
7.79.1-5.fc35
7.79.1-4.fc35
7.76.1-16.fc34
7.82.0-5.fc36
7.82.0-4.fc36
7.79.1-3.fc35
7.76.1-15.fc34
7.79.1-1.fc35
7.76.1-12.fc34
7.71.1-11.fc33
7.79.0-4.fc35
7.71.1-10.fc33
7.76.1-7.fc34
7.76.1-3.fc34
7.71.1-9.fc33
7.76.0-1.fc34
7.69.1-8.fc32
8.9.1-3.fc41
8.6.0-9.fc40
8.2.1-5.fc39
8.6.0-8.fc40
8.0.1-6.fc38
8.2.1-4.fc39
7.85.0-12.fc37
8.0.1-5.fc38
8.2.1-3.fc39
7.85.0-11.fc37
8.0.1-4.fc38
8.2.1-2.fc39
7.85.0-10.fc37
8.0.1-3.fc38
8.0.1-2.fc38
7.85.0-9.fc37
7.82.0-14.fc36
7.87.0-7.fc38
7.85.0-8.fc37
7.82.0-13.fc36
7.85.0-6.fc37
Vulnerabilities (137)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU146685 - Improper Restriction of Communication Channel to Intended Endpoints CVE-2026-13608 |
CWE-923 | Medium | 8.18.0-14.fc44, 8.21.0-8.fc45 | 02.09.2026 |
SB2026090233 SB2026090401 SB20260907132 and 8 more |
||
| #VU146684 - Use After Free CVE-2026-18924 |
CWE-416 | Low | 8.18.0-11.fc44, 8.18.0-12.fc44, 8.21.0-6.fc45 | 02.09.2026 |
SB2026090233 SB20260925165 SB20260925166 and 7 more |
||
| #VU146683 - Exposure of Data Element to Wrong Session CVE-2026-19931 |
CWE-488 | Low | 8.18.0-13.fc44, 8.21.0-6.fc45 | 02.09.2026 |
SB2026090233 SB20260925165 SB20260925166 and 5 more |
||
| #VU146682 - Use After Free CVE-2026-80229 |
CWE-416 | Low | 8.15.0-11.fc43, 8.18.0-12.fc44, 8.21.0-7.fc45 | 02.09.2026 |
SB2026090233 SB2026090401 SB20260907132 and 6 more |
||
| #VU146681 - Improper Certificate Validation CVE-2026-80230 |
CWE-295 | Low | 8.18.0-14.fc44, 8.21.0-8.fc45 | 02.09.2026 |
SB2026090233 SB2026090401 SB20260907132 and 10 more |
||
| #VU146679 - Insertion of Sensitive Information Into Sent Data CVE-2026-80255 |
CWE-201 | Medium | 8.15.0-11.fc43, 8.18.0-12.fc44, 8.21.0-7.fc45 | 02.09.2026 |
SB2026090233 SB2026093019 SB2026100631 and 2 more |
||
| #VU135088 - Exposure of sensitive information to an unauthorized actor CVE-2026-9546 |
CWE-200 | Medium | 8.18.0-9.fc44 | 24.06.2026 |
SB2026062427 SB2026081995 SB2026082542 and 5 more |
||
| #VU135087 - Exposure of sensitive information to an unauthorized actor CVE-2026-9545 |
CWE-200 | Low | 8.15.0-9.fc43, 8.18.0-9.fc44 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 11 more |
||
| #VU135086 - Use After Free CVE-2026-9080 |
CWE-416 | Low | 8.15.0-9.fc43, 8.18.0-9.fc44 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 12 more |
||
| #VU135085 - Insufficiently Protected Credentials CVE-2026-9079 |
CWE-522 | Low | 8.15.0-10.fc43, 8.18.0-10.fc44 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 12 more |
||
| #VU135083 - Double Free CVE-2026-8925 |
CWE-415 | Low | 8.15.0-9.fc43, 8.18.0-9.fc44 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026081995 and 8 more |
||
| #VU135081 - Improper Certificate Validation CVE-2026-8286 |
CWE-295 | Medium | 8.15.0-9.fc43, 8.18.0-9.fc44 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 16 more |
||
| #VU135080 - Improper Validation of Certificate with Host Mismatch CVE-2026-12064 |
CWE-297 | Medium | 8.15.0-9.fc43, 8.18.0-9.fc44 | 24.06.2026 |
SB2026062427 SB2026071429 SB2026071466 and 11 more |
||
| #VU135079 - Authentication Bypass by Primary Weakness CVE-2026-8932 |
CWE-305 | Low | 8.18.0-14.fc44 | 24.06.2026 |
SB2026062427 SB2026081995 SB2026082669 and 10 more |
||
| #VU135077 - Authentication Bypass by Capture-replay CVE-2026-8927 |
CWE-294 | Low | 8.15.0-9.fc43, 8.18.0-9.fc44 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 15 more |
||
| #VU135076 - Exposure of Data Element to Wrong Session CVE-2026-8458 |
CWE-488 | Low | 8.15.0-10.fc43, 8.18.0-10.fc44 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 14 more |
||
| #VU135074 - Allocation of Resources Without Limits or Throttling CVE-2026-11586 |
CWE-770 | Medium | 8.18.0-9.fc44 | 24.06.2026 |
SB2026062427 SB2026071429 SB2026081995 and 6 more |
||
| #VU135073 - Improper Certificate Validation CVE-2026-11564 |
CWE-295 | Medium | 8.18.0-10.fc44 | 24.06.2026 |
SB2026062427 SB2026071429 SB2026081995 and 6 more |
||
| #VU135072 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-11352 |
CWE-835 | Medium | 8.18.0-9.fc44 | 24.06.2026 |
SB2026062427 SB2026071429 SB2026081995 and 6 more |
||
| #VU135070 - Use After Free CVE-2026-10536 |
CWE-416 | Low | 8.15.0-10.fc43, 8.18.0-10.fc44 | 24.06.2026 |
SB2026062427 SB2026071429 SB2026071466 and 12 more |
Showing elements 1 - 20 out of 137