Known vulnerabilities in zsh

Software: zsh
Software CPE: cpe:2.3:a:sourceforge:zsh:*:*:*:*:*:*:*:*
Total vulnerabilities: 14
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting zsh zsh is affected by 14 known vulnerabilities: 1 high, 13 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60674 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-45444
CWE-78 High
No
No
5.8.1 17.02.2022 SB2022021701
SB2022021702
SB2022031621
and 15 more
#VU26210 - Improper Check for Dropped Privileges
CVE-2019-20044
CWE-273 Low
Available
No
5.8 19.03.2020 SB2020022427
SB2020031902
SB2020032519
and 13 more
#VU14702 - Missing Authorization
CVE-2018-0502
CWE-862 Low
No
No
5.6 08.09.2018 SB2018090802
SB2018100203
SB2018091703
and 6 more
#VU14701 - Missing Authorization
CVE-2018-13259
CWE-862 Low
No
No
5.6 06.09.2018 SB2018090802
SB2018100203
SB2018091703
and 8 more
#VU12187 - Stack-based buffer overflow
CVE-2018-1071
CWE-121 Low
No
No
- 26.04.2018 -
#VU11349 - Buffer overflow
CVE-2018-1083
CWE-120 Low
No
No
- 30.03.2018 -
#VU10874 - Buffer overflow
CVE-2014-10072
CWE-120 Low
No
No
- 07.03.2018 -
#VU10873 - NULL Pointer Dereference
CVE-2018-7548
CWE-476 Low
No
No
- 07.03.2018 -
#VU10872 - Permissions, Privileges, and Access Controls
CVE-2014-10070
CWE-264 Low
No
No
- 07.03.2018 -
#VU10871 - Buffer overflow
CVE-2014-10071
CWE-120 Low
No
No
- 07.03.2018 -
#VU10869 - NULL Pointer Dereference
CVE-2017-18205
CWE-476 Low
No
No
- 07.03.2018 -
#VU10862 - Off-by-one Error
CVE-2016-10714
CWE-193 Low
No
No
- 07.03.2018 -
#VU10856 - Improper input validation
CVE-2018-7549
CWE-20 Low
No
No
- 07.03.2018 -
#VU10855 - Buffer overflow
CVE-2017-18206
CWE-120 Low
No
No
- 07.03.2018 -