How many CVEs does Artifex have?

Artifex has 262 published CVE records since 2010, including 24 in the last two years.

How many Artifex CVEs are in CISA KEV?

Yes — 1 of Artifex's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which Artifex products have the most CVEs?

The Artifex products with the most published CVEs are ghostscript, mupdf, mujs, gpl ghostscript, ghostpdl-downloads.

What are the most common weakness types in Artifex CVEs?

Artifex's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-648 (Incorrect Use of Privileged APIs), CWE-190 (Integer Overflow or Wraparound), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

Are there public exploits for Artifex vulnerabilities?

Yes — 46 of Artifex's CVEs have a known public exploit.

How many critical Artifex vulnerabilities are there?

Artifex has 31 critical and 121 high-severity CVEs.

What is the average severity of Artifex CVEs?

The average CVSS base score across Artifex's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

262 CVEs

1 in CISA KEV

Artifex Vulnerabilities

Name: Artifex vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Artifex.

262

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

46

Public exploits

PoC or exploit code

7.0

Avg CVSS

2010–2026

Overview

Artifex has 262 published CVE records since 2010, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 46 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Artifex products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Artifex's vulnerability posture, as a share of its 262 published CVEs.

Average CVSS: 7.0
Critical / high: 58%
Actively exploited (KEV): 0%
Public exploit available: 18%
Patch available: 91%

Severity and exploitation

How the CVSS severity of Artifex's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical31

High121

Medium109

Low1

In CISA’s Known Exploited Vulnerabilities catalog

1

One of Artifex's CVEs is confirmed exploited in the wild.

Public exploits

46

46 of Artifex's CVEs have a known public exploit available.

Most affected products

The Artifex products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Artifex CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Artifex CVE records.

Disclosure activity by year

How many Artifex CVEs were published each year.

2019

21

2020

32

2021

7

2022

10

2023

20

2024

20

2025

17

2026

7

Latest Artifex CVEs

The most recently disclosed vulnerabilities affecting Artifex.

MuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Rendering
CWE-674
High · CVSS 7.1
EPSS 0.3%2026-06-23
Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-bounds
CWE-119
Medium · CVSS 4.8
EPSS 0.2%2026-04-28
MuPDF < 1.27 mutool ANSI Injection via Metadata
CWE-150
Medium · CVSS 4.8
EPSS 0.2%2026-04-16
CVE-2026-3308
CWE-190
High · CVSS 7.8
EPSS 0.2%2026-03-31
CVE-2026-3029
CWE-22
High · CVSS 8.2
EPSS 0.4%2026-03-19
Artifex MuPDF win_main.c get_system_dpi uncontrolled search path
CWE-427
High · CVSS 7.3
EPSS 0.1%2026-02-10
MuPDF 1.23.0 through 1.27.0 Barcode Decoding Double Free
CWE-415
Medium · CVSS 5.9
EPSS 0.5%2026-02-06
High vulnerability · 2025-09-23
CWE-476
High · CVSS 7.5
EPSS 0.4%2025-09-23
Medium vulnerability · 2025-09-22
CWE-121
Medium · CVSS 5.5
EPSS 0.2%2025-09-22
Medium vulnerability · 2025-09-22
CWE-121
Medium · CVSS 5.5
EPSS 0.2%2025-09-22
Medium vulnerability · 2025-09-22
CWE-190
Medium · CVSS 5.5
EPSS 0.2%2025-09-22
Medium vulnerability · 2025-09-22
CWE-121
Medium · CVSS 4.3
EPSS 0.2%2025-09-22

Track new Artifex CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Artifex CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

phpMyAdmin272 CVEs libtiff266 CVEs Vim262 CVEs Elastic261 CVEs ISC259 CVEs sgi259 CVEs ABB257 CVEs Samba253 CVEs

Browse all vendors

Frequently asked questions

Common questions about Artifex vulnerabilities.

How many CVEs does Artifex have?: Artifex has 262 published CVE records since 2010, including 24 in the last two years.
How many Artifex CVEs are in CISA KEV?: Yes — 1 of Artifex's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which Artifex products have the most CVEs?: The Artifex products with the most published CVEs are ghostscript, mupdf, mujs, gpl ghostscript, ghostpdl-downloads.
What are the most common weakness types in Artifex CVEs?: Artifex's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-648 (Incorrect Use of Privileged APIs), CWE-190 (Integer Overflow or Wraparound), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
Are there public exploits for Artifex vulnerabilities?: Yes — 46 of Artifex's CVEs have a known public exploit.
How many critical Artifex vulnerabilities are there?: Artifex has 31 critical and 121 high-severity CVEs.
What is the average severity of Artifex CVEs?: The average CVSS base score across Artifex's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Artifex vulnerabilities

Monitor new Artifex vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing