Known vulnerabilities in libcurl
Vendor:
openEuler
Software:
libcurl
Software CPE:
cpe:2.3:o:openeuler:libcurl:*:*:*:*:*:openeuler:*:*
Website:
https://www.openeuler.org/
Total vulnerabilities:
92
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
7.71.1-54
7.79.1-56
8.4.0-37
7.71.1-52
7.79.1-53
8.4.0-35
8.4.0-33
8.4.0-30
7.79.1-49
8.4.0-29
7.71.1-48
7.71.1-47
7.71.1-45
7.79.1-46
8.4.0-26
7.79.1-42
8.4.0-14
7.79.1-36
7.79.1-33
8.4.0-11
7.71.1-33
7.79.1-25
7.71.1-32
7.71.1-31
7.71.1-30
7.71.1-27
7.71.1-24
7.79.1-15
7.79.1-14
7.79.1-13
7.71.1-20
7.79.1-12
7.71.1-19
7.71.1-18
7.71.1-15
7.71.1-14
7.71.1-13
7.71.1-12
7.71.1-11
7.71.1-10
7.71.1-9
7.71.1-7
7.71.1-6
7.71.1-5
7.69.1-2
7.69.1-1
Vulnerabilities (92)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU146685 - Improper Restriction of Communication Channel to Intended Endpoints CVE-2026-13608 |
CWE-923 | Medium | 8.4.0-37 | 02.09.2026 |
SB2026090233 SB2026090401 SB20260907132 and 10 more |
||
| #VU146684 - Use After Free CVE-2026-18924 |
CWE-416 | Low | 7.71.1-54, 7.79.1-56, 8.4.0-37 | 02.09.2026 |
SB2026090233 SB20260925165 SB20260925166 and 8 more |
||
| #VU146683 - Exposure of Data Element to Wrong Session CVE-2026-19931 |
CWE-488 | Low | 7.71.1-54, 7.79.1-56, 8.4.0-37 | 02.09.2026 |
SB2026090233 SB20260925165 SB20260925166 and 5 more |
||
| #VU146681 - Improper Certificate Validation CVE-2026-80230 |
CWE-295 | Low | 7.71.1-54, 7.79.1-56, 8.4.0-37 | 02.09.2026 |
SB2026090233 SB2026090401 SB20260907132 and 12 more |
||
| #VU146680 - Exposure of Data Element to Wrong Session CVE-2026-80231 |
CWE-488 | Low | 7.71.1-54, 7.79.1-56, 8.4.0-37 | 02.09.2026 |
SB2026090233 SB20260925165 SB20260925166 and 4 more |
||
| #VU146676 - Insertion of Sensitive Information Into Sent Data CVE-2026-82209 |
CWE-201 | Low | 7.71.1-54, 7.79.1-56, 8.4.0-37 | 02.09.2026 |
SB2026090233 SB20260925165 SB20260925166 and 5 more |
||
| #VU135089 - Improper Validation of Certificate with Host Mismatch CVE-2026-9547 |
CWE-297 | Medium | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 14 more |
||
| #VU135087 - Exposure of sensitive information to an unauthorized actor CVE-2026-9545 |
CWE-200 | Low | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 11 more |
||
| #VU135086 - Use After Free CVE-2026-9080 |
CWE-416 | Low | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 12 more |
||
| #VU135085 - Insufficiently Protected Credentials CVE-2026-9079 |
CWE-522 | Low | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 12 more |
||
| #VU135083 - Double Free CVE-2026-8925 |
CWE-415 | Low | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026081995 and 8 more |
||
| #VU135082 - Insertion of Sensitive Information Into Sent Data CVE-2026-8924 |
CWE-201 | Medium | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 16 more |
||
| #VU135081 - Improper Certificate Validation CVE-2026-8286 |
CWE-295 | Medium | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 17 more |
||
| #VU135079 - Authentication Bypass by Primary Weakness CVE-2026-8932 |
CWE-305 | Low | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026081995 SB2026082669 and 11 more |
||
| #VU135077 - Authentication Bypass by Capture-replay CVE-2026-8927 |
CWE-294 | Low | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 16 more |
||
| #VU135076 - Exposure of Data Element to Wrong Session CVE-2026-8458 |
CWE-488 | Low | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 14 more |
||
| #VU135074 - Allocation of Resources Without Limits or Throttling CVE-2026-11586 |
CWE-770 | Medium | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026071429 SB2026081995 and 6 more |
||
| #VU135073 - Improper Certificate Validation CVE-2026-11564 |
CWE-295 | Medium | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026071429 SB2026081995 and 6 more |
||
| #VU135072 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-11352 |
CWE-835 | Medium | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026071429 SB2026081995 and 6 more |
||
| #VU135070 - Use After Free CVE-2026-10536 |
CWE-416 | Low | 7.71.1-52, 7.79.1-53, 8.4.0-35 | 24.06.2026 |
SB2026062427 SB2026071429 SB2026071466 and 12 more |
Showing elements 1 - 20 out of 92