IN
Product
Inkscape
10
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 2
Watch
Add Inkscape to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-42704 | 7.8 | May 18 | Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code Affected: 0.91 |
| CVE-2026-4980 | 6.3 | Mar 27 | Improper Restriction of XML External Entity Reference in Inkscape Affected: 1.1 before 1.3 |
| CVE-2012-5656 | 5.5 | Jan 18 | The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection… Affected: before 0.48.4 |
| CVE-2021-42702 | 3.3 | May 18 | Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information Affected: 0.91 |
| CVE-2021-42700 | 3.3 | May 18 | Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information Affected: 0.91 |
| CVE-2012-6076 | – | Mar 12 | Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive… Affected: through 0.48.3.1; 0.37; 0.38.1; 0.39; 0.40; 0.41; +19 more |
| CVE-2007-1464 | – | Mar 21 | Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors Affected: through 0.45 |
| CVE-2007-1463 | – | Mar 21 | Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly… Affected: 0.40; 0.41; 0.42; 0.42.1; 0.42.2; 0.43; +1 more |
| CVE-2005-3885 | – | Nov 29 | The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file Affected: 0.41 |
| CVE-2005-3737 | – | Nov 22 | Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property… Affected: 0.41; 0.42; 0.42.1; 0.42.2 |
Showing 10