Known vulnerabilities in texlive

Vendor: TeX Users Group
Software: texlive
Software CPE: cpe:2.3:a:tex_users_group:texlive:*:*:*:*:*:*:*:*
Website: https://www.tug.org/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting texlive texlive is affected by 7 known vulnerabilities: 2 high, 1 medium, 4 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118762 - Protection Mechanism Failure
CVE-2023-32668		 CWE-693 Medium
No
No
 66984 25.11.2025 SB2023052504
SB2023052503
SB2023052505
and 1 more
#VU96489 - NULL Pointer Dereference
CVE-2023-46048		 CWE-476 Low
No
No
 - 23.08.2024 SB20240823100
SB20240823102
SB20240823103
and 6 more
#VU96488 - NULL Pointer Dereference
CVE-2023-46051		 CWE-476 Low
No
No
 - 23.08.2024 SB20240823100
SB20240823103
SB20240823107
#VU76489 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-32700		 CWE-78 High
No
No
 66984 25.05.2023 SB2023052503
SB2023052504
SB2023052505
and 13 more
#VU15378 - Buffer overflow
CVE-2018-17407		 CWE-120 High
No
No
 - 16.10.2018 SB2018101707
SB2018101811
SB2018121019
and 4 more
#VU38424 - Improper Link Resolution Before File Access ('Link Following')
CVE-2015-5700		 CWE-59 Low
No
No
 - 25.08.2017 SB2017082511
#VU38425 - Improper Link Resolution Before File Access ('Link Following')
CVE-2015-5701		 CWE-59 Low
No
No
 - 25.08.2017 SB2017082511