Known vulnerabilities in curl

Software: curl
Software CPE: cpe:2.3:o:fedoraproject:curl:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 137
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting curl curl is affected by 137 known vulnerabilities: 18 high, 64 medium, 55 low Critical High Medium Low

Vulnerabilities (137)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146685 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2026-13608
CWE-923 Medium
No
No
8.18.0-14.fc44, 8.21.0-8.fc45 02.09.2026 SB2026090233
SB2026090401
SB20260907132
and 8 more
#VU146684 - Use After Free
CVE-2026-18924
CWE-416 Low
No
No
8.18.0-11.fc44, 8.18.0-12.fc44, 8.21.0-6.fc45 02.09.2026 SB2026090233
SB20260925165
SB20260925166
and 7 more
#VU146683 - Exposure of Data Element to Wrong Session
CVE-2026-19931
CWE-488 Low
No
No
8.18.0-13.fc44, 8.21.0-6.fc45 02.09.2026 SB2026090233
SB20260925165
SB20260925166
and 5 more
#VU146682 - Use After Free
CVE-2026-80229
CWE-416 Low
No
No
8.15.0-11.fc43, 8.18.0-12.fc44, 8.21.0-7.fc45 02.09.2026 SB2026090233
SB2026090401
SB20260907132
and 6 more
#VU146681 - Improper Certificate Validation
CVE-2026-80230
CWE-295 Low
No
No
8.18.0-14.fc44, 8.21.0-8.fc45 02.09.2026 SB2026090233
SB2026090401
SB20260907132
and 10 more
#VU146679 - Insertion of Sensitive Information Into Sent Data
CVE-2026-80255
CWE-201 Medium
No
No
8.15.0-11.fc43, 8.18.0-12.fc44, 8.21.0-7.fc45 02.09.2026 SB2026090233
SB2026093019
SB2026100631
and 2 more
#VU135088 - Exposure of sensitive information to an unauthorized actor
CVE-2026-9546
CWE-200 Medium
No
No
8.18.0-9.fc44 24.06.2026 SB2026062427
SB2026081995
SB2026082542
and 5 more
#VU135087 - Exposure of sensitive information to an unauthorized actor
CVE-2026-9545
CWE-200 Low
No
No
8.15.0-9.fc43, 8.18.0-9.fc44 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 11 more
#VU135086 - Use After Free
CVE-2026-9080
CWE-416 Low
No
No
8.15.0-9.fc43, 8.18.0-9.fc44 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 12 more
#VU135085 - Insufficiently Protected Credentials
CVE-2026-9079
CWE-522 Low
No
No
8.15.0-10.fc43, 8.18.0-10.fc44 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 12 more
#VU135083 - Double Free
CVE-2026-8925
CWE-415 Low
No
No
8.15.0-9.fc43, 8.18.0-9.fc44 24.06.2026 SB2026062427
SB2026070135
SB2026081995
and 8 more
#VU135081 - Improper Certificate Validation
CVE-2026-8286
CWE-295 Medium
No
No
8.15.0-9.fc43, 8.18.0-9.fc44 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 16 more
#VU135080 - Improper Validation of Certificate with Host Mismatch
CVE-2026-12064
CWE-297 Medium
No
No
8.15.0-9.fc43, 8.18.0-9.fc44 24.06.2026 SB2026062427
SB2026071429
SB2026071466
and 11 more
#VU135079 - Authentication Bypass by Primary Weakness
CVE-2026-8932
CWE-305 Low
No
No
8.18.0-14.fc44 24.06.2026 SB2026062427
SB2026081995
SB2026082669
and 10 more
#VU135077 - Authentication Bypass by Capture-replay
CVE-2026-8927
CWE-294 Low
No
No
8.15.0-9.fc43, 8.18.0-9.fc44 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 15 more
#VU135076 - Exposure of Data Element to Wrong Session
CVE-2026-8458
CWE-488 Low
No
No
8.15.0-10.fc43, 8.18.0-10.fc44 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 14 more
#VU135074 - Allocation of Resources Without Limits or Throttling
CVE-2026-11586
CWE-770 Medium
No
No
8.18.0-9.fc44 24.06.2026 SB2026062427
SB2026071429
SB2026081995
and 6 more
#VU135073 - Improper Certificate Validation
CVE-2026-11564
CWE-295 Medium
No
No
8.18.0-10.fc44 24.06.2026 SB2026062427
SB2026071429
SB2026081995
and 6 more
#VU135072 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-11352
CWE-835 Medium
No
No
8.18.0-9.fc44 24.06.2026 SB2026062427
SB2026071429
SB2026081995
and 6 more
#VU135070 - Use After Free
CVE-2026-10536
CWE-416 Low
No
No
8.15.0-10.fc43, 8.18.0-10.fc44 24.06.2026 SB2026062427
SB2026071429
SB2026071466
and 12 more


Showing elements 1 - 20 out of 137