Login Request a demo
TE
Product
Tensorflow
by Google · last CVE Sep 25, 2025
431
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities431In the news0Timeline
Severity mix
Critical 18High 233Medium 178Low 2
Severity
All severities431Critical18High233Medium178Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tensorflow to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-15196
9.9
1%
Sep 25
In Tensorflow version 2.3.0, the `SparseCountSparseOutput` and `RaggedCountSparseOutput` implementations don't validate that the `weights` tensor has the same shape as the data
Affected: 2.3.0
CVE-2023-25668
9.8
1%
Mar 25
TensorFlow is an open source platform for machine learning
Affected: before 2.12.0
CVE-2023-25664
9.8
0%
Mar 25
TensorFlow is an open source platform for machine learning
Affected: before 2.12.0
CVE-2022-41900
9.8
1%
Nov 18
TensorFlow is an open source platform for machine learning
Affected: before 2.8.4; 2.9.0 before 2.9.3; 2.10.0
CVE-2022-35939
9.8
1%
Sep 16
TensorFlow is an open source platform for machine learning
Affected: 2.7.0 before 2.7.2; 2.8.0 before 2.8.1; 2.9.0 before 2.9.1; 2.10; 2.10; 2.10; +1 more
CVE-2022-23587
9.8
1%
Feb 4
Tensorflow is an Open Source Machine Learning Framework
Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0
CVE-2020-15208
9.8
1%
Sep 25
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, when determining the common dimension size of two tensors, TFLite uses a `DCHECK` which is no-op outside…
Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1
CVE-2020-15205
9.8
1%
Sep 25
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` argument of `tf.raw_ops.StringNGrams` lacks validation
Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1
CVE-2019-16778
9.8
1%
Dec 16
In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced when the Index template argument is int32
Affected: 1.0.0 before 1.15.0
CVE-2018-7575
9.8
1%
Apr 24
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability
Affected: through 1.7.0
CVE-2022-41910
9.1
0%
Dec 6
TensorFlow is an open source platform for machine learning
Affected: before 2.8.4; 2.9.0 before 2.9.3; 2.10.0
CVE-2022-41902
9.1
0%
Dec 6
TensorFlow is an open source platform for machine learning
Affected: before 2.8.4; 2.9.0 before 2.9.3; 2.10.0
CVE-2022-41880
9.1
0%
Nov 18
TensorFlow is an open source platform for machine learning
Affected: before 2.8.4; 2.9.0 before 2.9.3; 2.10.0
CVE-2022-35938
9.1
1%
Sep 16
TensorFlow is an open source platform for machine learning
Affected: 2.7.0 before 2.7.2; 2.8.0 before 2.8.1; 2.9.0 before 2.9.1; 2.10; 2.10; 2.10; +1 more
CVE-2022-35937
9.1
1%
Sep 16
TensorFlow is an open source platform for machine learning
Affected: 2.7.0 before 2.7.2; 2.8.0 before 2.8.1; 2.9.0 before 2.9.1; 2.10; 2.10; 2.10; +1 more
CVE-2021-35958
9.1
2%
Jun 30
TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True
Affected: through 2.5.0
CVE-2020-15207
9.0
1%
Sep 25
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python's indexing with negative values, TFLite uses `ResolveAxis` to convert negative values to…
Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1
CVE-2020-15202
9.0
1%
Sep 25
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in TensorFlow expects the last argument to be a function taking two `int64` (i.e., `long…
Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1
Showing 18