Known vulnerabilities in curl - page 2

Software: curl
Software CPE: cpe:2.3:o:fedoraproject:curl:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 137
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting curl curl is affected by 137 known vulnerabilities: 18 high, 64 medium, 55 low Critical High Medium Low

Vulnerabilities (137)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135089 - Improper Validation of Certificate with Host Mismatch
CVE-2026-9547
CWE-297 Medium
No
No
8.15.0-8.fc43, 8.18.0-8.fc44 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 14 more
#VU135084 - Insufficiently Protected Credentials
CVE-2026-8926
CWE-522 Low
No
No
8.15.0-8.fc43, 8.18.0-8.fc44 24.06.2026 SB2026062427
SB2026070135
SB2026072507
and 15 more
#VU135082 - Insertion of Sensitive Information Into Sent Data
CVE-2026-8924
CWE-201 Medium
No
No
8.15.0-8.fc43, 8.18.0-8.fc44 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 15 more
#VU135075 - Authentication Bypass by Capture-replay
CVE-2026-11856
CWE-294 Medium
No
No
8.15.0-8.fc43, 8.18.0-8.fc44 24.06.2026 SB2026062427
SB2026080303
SB2026080441
and 15 more
#VU128459 - Authentication Bypass by Capture-replay
CVE-2026-7168
CWE-294 Medium
No
No
8.15.0-8.fc43, 8.18.0-8.fc44 29.04.2026 SB2026042955
SB2026050481
SB2026052287
and 13 more
#VU128458 - Improper Certificate Validation
CVE-2026-7009
CWE-295 Medium
No
No
8.18.0-8.fc44 29.04.2026 SB2026042955
SB2026080303
SB2026081994
#VU123889 - Authentication Bypass by Primary Weakness
CVE-2026-3784
CWE-305 Medium
No
No
8.11.1-8.fc42, 8.15.0-6.fc43, 8.18.0-6.fc44 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 19 more
#VU123888 - Authentication Bypass by Primary Weakness
CVE-2026-1965
CWE-305 Medium
No
No
8.11.1-8.fc42, 8.15.0-6.fc43, 8.18.0-6.fc44 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 15 more
#VU123887 - Use After Free
CVE-2026-3805
CWE-416 Medium
No
No
8.11.1-8.fc42, 8.15.0-6.fc43, 8.18.0-6.fc44 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 7 more
#VU123886 - Insufficiently Protected Credentials
CVE-2026-3783
CWE-522 Medium
No
No
8.11.1-8.fc42, 8.15.0-6.fc43, 8.18.0-6.fc44 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 20 more
#VU115138 - Out-of-bounds read
CVE-2025-9086
CWE-125 Low
No
No
8.9.1-4.fc41, 8.11.1-6.fc42, 8.15.0-7.fc43 10.09.2025 SB2025091034
SB2025091144
SB2025091301
and 44 more
#VU115137 - Use of Insufficiently Random Values
CVE-2025-10148
CWE-330 Low
No
No
8.11.1-6.fc42 10.09.2025 SB2025091034
SB2025091144
SB2025091301
and 10 more
#VU99865 - Comparison using wrong factors
CVE-2024-9681
CWE-1025 Low
No
No
8.9.1-3.fc41 06.11.2024 SB2024110621
SB2024110655
SB2024110656
and 30 more
#VU94715 - Double Free
CVE-2024-6197
CWE-415 Medium
No
No
8.6.0-9.fc40 24.07.2024 SB2024072431
SB2024080568
SB20240806402
and 11 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398
CWE-772 Medium
No
No
8.2.1-5.fc39, 8.6.0-8.fc40 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87846 - Improper input validation
CVE-2024-2004
CWE-20 Low
No
No
8.2.1-5.fc39, 8.6.0-8.fc40 27.03.2024 SB2024032713
SB2024032740
SB2024032748
and 28 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218
CWE-200 Low
No
No
8.0.1-6.fc38, 8.2.1-4.fc39 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU83899 - Missing Encryption of Sensitive Data
CVE-2023-46219
CWE-311 Medium
No
No
8.0.1-6.fc38, 8.2.1-4.fc39 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 31 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545
CWE-122 High
Available
No
7.85.0-12.fc37, 8.0.1-5.fc38, 8.2.1-3.fc39 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546
CWE-73 Low
No
No
7.85.0-12.fc37, 8.0.1-5.fc38, 8.2.1-3.fc39 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more


Showing elements 21 - 40 out of 137