How many CVEs does XnView have?

XnView has 174 published CVE records since 2008, including 2 in the last two years.

How many XnView CVEs are in CISA KEV?

None of XnView's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which XnView products have the most CVEs?

The XnView products with the most published CVEs are XnView, nconvert, xnview classic, xnview mp.

What are the most common weakness types in XnView CVEs?

XnView's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-122 (Heap-based Buffer Overflow), CWE-191 (Integer Underflow (Wrap or Wraparound)), CWE-416 (Use After Free).

Are there public exploits for XnView vulnerabilities?

Yes — 14 of XnView's CVEs have a known public exploit.

How many critical XnView vulnerabilities are there?

XnView has 12 critical and 152 high-severity CVEs.

What is the average severity of XnView CVEs?

The average CVSS base score across XnView's scored CVEs is 7.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

174 CVEs

XnView Vulnerabilities

Name: XnView vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for XnView.

174

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

14

Public exploits

PoC or exploit code

7.8

Avg CVSS

2008–2026

Overview

XnView has 174 published CVE records since 2008, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 14 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting XnView products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on XnView's vulnerability posture, as a share of its 174 published CVEs.

Average CVSS: 7.8
Critical / high: 94%
Actively exploited (KEV): 0%
Public exploit available: 8%
Patch available: 5%

Severity and exploitation

How the CVSS severity of XnView's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical12

High152

Medium10

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of XnView's CVEs are currently listed in CISA's KEV catalog.

Public exploits

14

14 of XnView's CVEs have a known public exploit available.

Most affected products

The XnView products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in XnView CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish XnView CVE records.

Disclosure activity by year

How many XnView CVEs were published each year.

2017

114

2018

3

2019

23

2020

7

2021

2

2023

8

2024

2

2026

2

Latest XnView CVEs

The most recently disclosed vulnerabilities affecting XnView.

Medium vulnerability · 2026-03-23
CWE-416
Medium · CVSS 6.2
EPSS 0.2%2026-03-23
Medium vulnerability · 2026-03-23
CWE-120
Medium · CVSS 6.2
EPSS 0.2%2026-03-23
High vulnerability · 2024-12-11
CWE-191
High · CVSS 8.8
EPSS 0.5%2024-12-11
Medium vulnerability · 2024-02-28
CWE-122
Medium · CVSS 6.5
EPSS 1.1%2024-02-28
Critical vulnerability · 2023-12-29
Critical · CVSS 9.8
EPSS 0.7%2023-12-29
Critical vulnerability · 2023-12-29
Critical · CVSS 9.8
EPSS 0.6%2023-12-29
High vulnerability · 2023-10-27
High · CVSS 7.8
EPSS 0.2%2023-10-27
High vulnerability · 2023-10-19
High · CVSS 7.8
EPSS 0.5%2023-10-19
High vulnerability · 2023-10-19
High · CVSS 7.8
EPSS 0.5%2023-10-19
High vulnerability · 2023-10-18
CWE-120
High · CVSS 7.8
EPSS 0.6%2023-10-18
High vulnerability · 2023-08-11
High · CVSS 7.8
EPSS 0.3%2023-08-11
High vulnerability · 2023-08-11
High · CVSS 7.8
EPSS 0.3%2023-08-11

Track new XnView CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor XnView CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

owncloud176 CVEs Kashipara176 CVEs Zephyr Project175 CVEs Sophos174 CVEs Devolutions174 CVEs dedecms173 CVEs radare173 CVEs Spring172 CVEs

Browse all vendors

Frequently asked questions

Common questions about XnView vulnerabilities.

How many CVEs does XnView have?: XnView has 174 published CVE records since 2008, including 2 in the last two years.
How many XnView CVEs are in CISA KEV?: None of XnView's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which XnView products have the most CVEs?: The XnView products with the most published CVEs are XnView, nconvert, xnview classic, xnview mp.
What are the most common weakness types in XnView CVEs?: XnView's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-122 (Heap-based Buffer Overflow), CWE-191 (Integer Underflow (Wrap or Wraparound)), CWE-416 (Use After Free).
Are there public exploits for XnView vulnerabilities?: Yes — 14 of XnView's CVEs have a known public exploit.
How many critical XnView vulnerabilities are there?: XnView has 12 critical and 152 high-severity CVEs.
What is the average severity of XnView CVEs?: The average CVSS base score across XnView's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track XnView vulnerabilities

Monitor new XnView vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing