How many CVEs does XnView have?

XnView has 175 published CVE records since 2008, including 3 in the last two years.

How many XnView CVEs are in CISA KEV?

None of XnView's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which XnView products have the most CVEs?

The XnView products with the most published CVEs are XnView, nconvert, xnview classic, xnview mp, Classic.

What are the most common weakness types in XnView CVEs?

XnView's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-787 (Out-of-bounds Write), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-189.

Are there public exploits for XnView vulnerabilities?

Yes — 42 of XnView's CVEs have a known public exploit.

How many critical XnView vulnerabilities are there?

XnView has 12 critical and 152 high-severity CVEs.

What is the average severity of XnView CVEs?

The average CVSS base score across XnView's scored CVEs is 7.8.

RadicalNotion.AI

Log in Create an account

175 CVEs

XnView Vulnerabilities

Name: XnView vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for XnView.

175

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

42

Public exploits

PoC or exploit code

7.8

Avg CVSS

2008–2026

Overview

XnView has 175 published CVE records since 2008, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 42 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

Security scorecard

A quick read on XnView's vulnerability posture, as a share of its 175 published CVEs.

Average CVSS: 7.8
Critical / high: 94%
Actively exploited (KEV): 0%
Public exploit available: 24%
Patch available: 5%

Severity and exploitation

How the CVSS severity of XnView's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical12

High152

Medium11

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of XnView's CVEs are currently listed in CISA's KEV catalog.

Public exploits

42

42 of XnView's CVEs have a known public exploit available.

Most affected products

The XnView products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in XnView CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish XnView CVE records.

Disclosure activity by year

How many XnView CVEs were published each year.

2017

114

2018

3

2019

23

2020

7

2021

2

2023

8

2024

2

2026

3

Latest XnView CVEs

The most recently disclosed vulnerabilities affecting XnView.

XnView Classic FLI File heap-based overflow
CWE-122
Medium · CVSS 5.3
EPSS 0.3%2026-10-07
Medium vulnerability · 2026-03-23
CWE-416
Medium · CVSS 6.2
EPSS 0.2%2026-03-23
Medium vulnerability · 2026-03-23
CWE-120
Medium · CVSS 6.2
EPSS 0.2%2026-03-23
High vulnerability · 2024-12-11
CWE-191
High · CVSS 8.8
EPSS 0.5%2024-12-11
Medium vulnerability · 2024-02-28
CWE-122
Medium · CVSS 6.5
EPSS 1.1%2024-02-28
Critical vulnerability · 2023-12-29
CWE-787
Critical · CVSS 9.8
EPSS 0.7%2023-12-29
Critical vulnerability · 2023-12-29
CWE-787
Critical · CVSS 9.8
EPSS 0.6%2023-12-29
High vulnerability · 2023-10-27
CWE-120
High · CVSS 7.8
EPSS 0.2%2023-10-27
High vulnerability · 2023-10-19
CWE-755
High · CVSS 7.8
EPSS 0.5%2023-10-19
High vulnerability · 2023-10-19
CWE-787
High · CVSS 7.8
EPSS 0.5%2023-10-19
High vulnerability · 2023-10-18
CWE-120
High · CVSS 7.8
EPSS 0.6%2023-10-18
High vulnerability · 2023-08-11
CWE-120
High · CVSS 7.8
EPSS 0.3%2023-08-11

Get an alert for each new XnView CVE, with AI-written analysis and remediation steps.

Monitor XnView CVEs

Other vendors

CVE counts for other vendors.

DrayTek177 CVEs dedecms177 CVEs Sophos176 CVEs owncloud176 CVEs Kashipara176 CVEs MIT176 CVEs Open WebUI176 CVEs Dolibarr175 CVEs

Browse all vendors

Frequently asked questions

Common questions about XnView vulnerabilities.

How many CVEs does XnView have?: XnView has 175 published CVE records since 2008, including 3 in the last two years.
How many XnView CVEs are in CISA KEV?: None of XnView's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which XnView products have the most CVEs?: The XnView products with the most published CVEs are XnView, nconvert, xnview classic, xnview mp, Classic.
What are the most common weakness types in XnView CVEs?: XnView's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-787 (Out-of-bounds Write), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-189.
Are there public exploits for XnView vulnerabilities?: Yes — 42 of XnView's CVEs have a known public exploit.
How many critical XnView vulnerabilities are there?: XnView has 12 critical and 152 high-severity CVEs.
What is the average severity of XnView CVEs?: The average CVSS base score across XnView's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track XnView vulnerabilities

Get an alert for each new XnView CVE, with AI-written analysis and remediation steps.

Create an account See pricing