89 exploited vulnerabilities in Curl
- Vendors
- Alt Linux, Centos, Debian, Red Hat, Red Os, Rocky Linux
- With known exploits
- 89
- Affected Haxx Curl versions
- < 7.78.0, 8.18.0, 8.11.0, 8.10.0, 7.88.0, 8.4.0, 7.83.0, 8.20.0, 8.1.0, 7.87.0, 7.82.0, 8.19.0, 8.16.0, 8.5.0, 8.17.0, 7.84.0, 7.83.1, 7.85.0, 8.7.0, 8.12.0, 7.76.1
- Affected Curl versions
- = 5.11, 6.0, 6.1beta, 6.2, 6.3, 6.3.1, 6.4, 6.5, 6.5.1, 6.5.2, 7.1, 7.1.1, 7.2, 7.2.1, 7.3, 7.4, 7.4.1, 7.4.2, 7.5, 7.5.1, 7.5.2, 7.6, 7.6.1, 7.7, 7.7.1, 7.7.2, 7.7.3, 7.8, 7.8.1, 7.8.2, 7.9, 7.9.1, 7.9.2, 7.9.3, 7.9.4, 7.9.5, 7.9.6, 7.9.7, 7.9.8, 7.10
- Affected Haxx Libcurl versions
- ≤ 7.75.0, 8.8.0
- Affected Php versions
- = 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7
- Affected Curl Wcurl versions
- < 2025-11-09
- Affected Apple Mac Os X versions
- ≤ 10.9.1, 10.9
Vulnerabilities with exploits
Highest CVSS first — 3 of these already have exploit code on Sploitus
CVE-2021-22922
CVE-2009-0037 2 exploits
CVE-2026-3784
CVE-2024-9681
CVE-2024-8096
CVE-2023-23915
CVE-2023-46218
CVE-2022-27776
CVE-2026-6253
CVE-2026-4873
CVE-2025-13034
CVE-2023-28321
CVE-2023-28320
CVE-2022-43552
CVE-2022-27774
CVE-2025-15224
CVE-2025-14819
CVE-2025-14524
CVE-2021-22923
CVE-2026-7168
CVE-2026-7009
CVE-2026-3783
CVE-2025-10148
CVE-2023-46219
CVE-2024-0853
CVE-2021-22925
CVE-2021-22876
CVE-2004-1392 1 exploit
CVE-2025-11563
CVE-2025-10966
CVE-2024-6874
CVE-2022-32205
CVE-2022-30115
CVE-2021-22890
CVE-2014-1263 1 exploit
CVE-2022-35252
CVE-2024-2004
CVE-2025-0167
CVE-2021-22898