How many haxx curl CVEs are in CISA KEV?

None of haxx curl's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for haxx curl vulnerabilities?

Yes — 70 of haxx curl's CVEs have a known public exploit.

Which versions of haxx curl are affected?

292 distinct haxx curl versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in haxx curl CVEs?

haxx curl's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-840, CWE-295 (Improper Certificate Validation).

How many critical haxx curl vulnerabilities are there?

haxx curl has 33 critical and 51 high-severity CVEs.

What is the average severity of haxx curl CVEs?

The average CVSS base score across haxx curl's scored CVEs is 7.0.

haxx curl Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

haxx curl has 160 published CVE records since 2005, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 70 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting haxx curl, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include enterprise linux desktop, enterprise linux server, enterprise linux workstation, macos, windows, windows embedded compact.

Severity and exploitation

How the CVSS severity of haxx curl's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical33

High51

Medium66

Low10

In CISA’s Known Exploited Vulnerabilities catalog

None of haxx curl's CVEs are currently listed in CISA's KEV catalog.

Public exploits

70 of haxx curl's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every haxx curl version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

7.27.0 <= v <= 7.27.011 CVEs
7.28.0 <= v <= 7.28.011 CVEs
7.28.1 <= v <= 7.28.111 CVEs
7.31.0 <= v <= 7.31.011 CVEs
7.32.0 <= v <= 7.32.011 CVEs
< 7.51.010 CVEs
7.26.0 <= v <= 7.26.010 CVEs
7.33.0 <= v <= 7.33.010 CVEs
7.34.0 <= v <= 7.34.010 CVEs
7.35.0 <= v <= 7.35.010 CVEs
7.19.7 <= v <= 7.19.79 CVEs

Frequently asked questions

Common questions about haxx curl vulnerabilities.

How many CVEs does haxx curl have?: haxx curl has 160 published CVE records since 2005.
How many haxx curl CVEs are in CISA KEV?: None of haxx curl's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for haxx curl vulnerabilities?: Yes — 70 of haxx curl's CVEs have a known public exploit.
Which versions of haxx curl are affected?: 292 distinct haxx curl versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in haxx curl CVEs?: haxx curl's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-840, CWE-295 (Improper Certificate Validation).
How many critical haxx curl vulnerabilities are there?: haxx curl has 33 critical and 51 high-severity CVEs.
What is the average severity of haxx curl CVEs?: The average CVSS base score across haxx curl's scored CVEs is 7.0.

haxx curl Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Common weakness types

Disclosure activity by year

Other haxx products

Frequently asked questions

References

Track haxx curl vulnerabilities

Fixed in