Login Request a demo
TL
Product
Tex Live
by Tug · last CVE Mar 27, 2024
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 1High 4Medium 2Low 0
Severity
All severities10Critical1High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tex Live to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-10243
9.8
7%
May 2
TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file
Affected: All versions, or not specified
CVE-2017-17513
8.8
1%
Dec 14
TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct…
Affected: through 20170524
CVE-2024-25262
8.1
1%
Feb 20
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump
Affected: c515e
CVE-2023-32700
7.8
1%
May 20
LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source
Affected: 2017 before 2023
CVE-2018-17407
7.8
2%
Sep 23
An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21
Affected: before 2018-09-21
CVE-2023-46048
6.2
0%
Mar 27
Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c
Affected: 944e257
CVE-2023-32668
5.5
0%
May 11
LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests
Affected: 2009 before 2023
CVE-2010-1440
–
3%
May 7
Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or…
Affected: through 2009; 1996; 1998; 1999; 2000; 2001; +6 more
CVE-2010-0827
–
4%
May 7
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via…
Affected: through 2009; 1996; 1998; 1999; 2000; 2001; +6 more
CVE-2010-0739
–
5%
Apr 16
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a…
Affected: All versions, or not specified
Showing 10