89 exploited vulnerabilities in Curl
- Vendors
- Alt Linux, Apple, Red Os, Suse, Canonical, Microsoft
- With known exploits
- 89
- Affected Haxx Curl versions
- < 8.3.0, 7.84.0, 7.86.0, 8.21.0, 7.881, 7.60.0, 7.56.1, 8.11.1, 7.88.0, 7.88.1, 7.79.0, 7.83.0, 7.76.1, 8.20.0, 8.19.0, 8.16.0, 8.1.0, 7.87.0, 7.70.0, 7.83.1, 7.82.0
- Affected Daniel Stenberg Curl versions
- = 6.0, 6.1, 6.1beta, 6.3, 6.4, 6.5, 6.5.1, 6.5.2, 7.1, 7.1.1, 7.2, 7.2.1, 7.3, 7.4
- Affected Haxx Libcurl versions
- < 8.4.0, 7.56.1
- Affected Php versions
- ≤ 5.6.26, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11
- Affected Crestron am-100 Firmware versions
- = 1.6.0.2
- Affected Youtube-dlc Project Youtube-dlc versions
- All versions
- Affected Yt-dl Youtube-dl versions
- All versions
- Affected Yt-dlp Project Yt-dlp versions
- < 2023.07.06, 2023.07.06.185519
Vulnerabilities with exploits
Highest CVSS first — 8 of these already have exploit code on Sploitus
CVE-2023-38039 1 exploit
CVE-2022-32207
CVE-2022-42915
CVE-2000-0973 2 exploits
CVE-2026-8925
CVE-2023-38545 14 exploits
CVE-2023-27533
CVE-2018-0500
CVE-2017-8817
CVE-2016-9137
CVE-2024-11053
CVE-2023-23914
CVE-2026-8926
CVE-2026-8924
CVE-2019-3931
CVE-2023-27534
CVE-2021-22946
CVE-2021-22947
CVE-2023-35934
CVE-2025-15612
CVE-2022-27778
CVE-2022-22576
CVE-2021-22901
CVE-2026-11352
CVE-2026-6276
CVE-2026-3805 2 exploits
CVE-2025-9086
CVE-2023-23916
CVE-2023-28319
CVE-2023-28322
CVE-2022-43551
CVE-2022-35260
CVE-2022-42916
CVE-2020-8177
CVE-2026-8932 1 exploit
CVE-2026-12064
CVE-2026-3547
CVE-2025-7103
CVE-2022-27780
CVE-2022-27775
CVE-2020-8286
CVE-2020-8285
CVE-2020-8169
CVE-2015-8625
CVE-2013-0249 5 exploits
CVE-2013-2174 1 exploit
CVE-2011-3389 4 exploits
CVE-2026-50019
CVE-2022-32206
CVE-2022-32208