How many CVEs does curl curl have?

curl curl has 201 published CVE records since 2005.

How many curl curl CVEs are in CISA KEV?

None of curl curl's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for curl curl vulnerabilities?

Yes — 124 of curl curl's CVEs have a known public exploit.

Which versions of curl curl are affected?

1,381 distinct curl curl versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in curl curl CVEs?

curl curl's CVEs most often map to these CWE weakness types: CWE-295 (Improper Certificate Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read).

How many critical curl curl vulnerabilities are there?

curl curl has 43 critical and 75 high-severity CVEs.

What is the average severity of curl curl CVEs?

The average CVSS base score across curl curl's scored CVEs is 7.1.

curl Vulnerabilities: CVEs, CISA KEV & Security Advisories

Severity and exploitation

How the CVSS severity of curl's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical43

High75

Medium71

Low12

In CISA’s Known Exploited Vulnerabilities catalog

None of curl's CVEs are currently listed in CISA's KEV catalog.

Public exploits

124

124 of curl's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every curl version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

curl-7_46_0113 CVEs
curl-7_47_0111 CVEs
curl-7_47_1111 CVEs
curl-7_48_0111 CVEs
curl-7_49_0111 CVEs
curl-7_37_0110 CVEs
curl-7_37_1110 CVEs
curl-7_41_0110 CVEs
curl-7_45_0110 CVEs
curl-7_36_0109 CVEs
curl-7_44_0109 CVEs
curl-7_49_1109 CVEs

Frequently asked questions

Common questions about curl vulnerabilities.

How many CVEs does curl curl have?: curl curl has 201 published CVE records since 2005.
How many curl curl CVEs are in CISA KEV?: None of curl curl's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for curl curl vulnerabilities?: Yes — 124 of curl curl's CVEs have a known public exploit.
Which versions of curl curl are affected?: 1,381 distinct curl curl versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in curl curl CVEs?: curl curl's CVEs most often map to these CWE weakness types: CWE-295 (Improper Certificate Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read).
How many critical curl curl vulnerabilities are there?: curl curl has 43 critical and 75 high-severity CVEs.
What is the average severity of curl curl CVEs?: The average CVSS base score across curl curl's scored CVEs is 7.1.

curl Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Common weakness types

Disclosure activity by year

Other curl products

Frequently asked questions

References

Track curl vulnerabilities

Version ranges

Fixed in