Login Request a demo
XZ
Product
xz
by tukaani-project · last CVE Apr 2, 2026
3
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Vulnerabilities3In the news1Timeline
Severity mix
Critical 0High 1Medium 2Low 0
Severity
All severities3Critical0High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add xz to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-31115
8.7
1%
Apr 3
XZ has a heap-use-after-free bug in threaded .xz decoder
Affected: >= 5.3.3alpha, < 5.8.1
CVE-2024-47611
6.3
1%
Oct 2
XZ Utils on Microsoft Windows platform are vulnerable to argument injection
Affected: < 5.6.3
CVE-2026-34743
5.3
1%
Apr 2
XZ Utils: Buffer overflow in lzma_index_append()
Affected: < 5.8.3
Showing 3