Known vulnerabilities in WeeChat

Software: WeeChat
Software CPE: cpe:2.3:a:weechat_org:weechat:*:*:*:*:*:*:*:*
Total vulnerabilities: 22
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WeeChat WeeChat is affected by 22 known vulnerabilities: 4 high, 14 medium, 4 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147393 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
4.10.1 08.09.2026 SB2026090844
#VU147392 - Uncontrolled Memory Allocation
CWE-789 Low
No
No
4.10.1 08.09.2026 SB2026090844
#VU147391 - Incorrect Authorization
CWE-863 Medium
No
No
4.10.1 08.09.2026 SB2026090844
#VU147390 - Uncontrolled Memory Allocation
CWE-789 Medium
No
No
4.10.1 08.09.2026 SB2026090844
#VU147389 - Uncontrolled Memory Allocation
CWE-789 Medium
No
No
4.10.1 08.09.2026 SB2026090844
#VU147388 - Uncontrolled Memory Allocation
CWE-789 Medium
No
No
4.10.1 08.09.2026 SB2026090844
#VU147387 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-53524
CWE-409 Low
No
No
4.9.1 08.09.2026 SB2026090843
#VU147386 - Information Exposure Through Timing Discrepancy
CVE-2026-53525
CWE-208 Medium
No
No
4.9.1 08.09.2026 SB2026090843
#VU147385 - Missing release of memory after effective lifetime
CWE-401 Medium
No
No
4.9.3 08.09.2026 SB2026090842
#VU147384 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-86036
CWE-288 High
No
No
4.9.4 08.09.2026 SB2026090841
#VU139867 - Double Free
CWE-415 High
No
No
4.9.5 28.07.2026 SB2026072867
#VU139829 - Use After Free
CWE-416 High
No
No
4.9.5 28.07.2026 SB2026072867
#VU139817 - Stack-based buffer overflow
CWE-121 Medium
No
No
4.9.5 28.07.2026 SB2026072867
#VU101837 - Integer overflow
CVE-2024-46613
CWE-190 Low
No
No
4.4.2 18.12.2024 SB2024121841
#VU56368 - Out-of-bounds read
CVE-2021-40516
CWE-125 Medium
No
No
3.2.1 07.09.2021 SB2021090708
#VU26384 - Memory corruption
CVE-2020-9760
CWE-119 Medium
No
No
2.7.1 25.03.2020 SB2020021223
SB2020032516
#VU26383 - NULL Pointer Dereference
CVE-2020-9759
CWE-476 Medium
No
No
2.7.1 25.03.2020 SB2020021223
SB2020032516
#VU25599 - Memory corruption
CVE-2020-8955
CWE-119 High
No
No
2.7.1 26.02.2020 SB2020021223
SB2020022602
SB2020022719
and 6 more
#VU8599 - Improper input validation
CVE-2017-14727
CWE-20 Low
No
No
- 25.09.2017 SB2017092602
SB2017092603
SB2017102320
#VU43278 - Improper input validation
CVE-2012-5534
CWE-20 Medium
No
No
- 03.12.2012 SB2012120306
SB2014050302
SB2012111908
and 1 more


Showing elements 1 - 20 out of 22