MA
Product
Mapserver
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 2Low 0
Watch
Add Mapserver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45104 | 7.5 | May 27 | MapServer: NULL pointer dereference in SLD `<ElseFilter>` rule parsing reachable via WMS `SLD_BODY` Affected: 6.4.0 before 8.6.3 |
| CVE-2026-33721 | 7.5 | Mar 27 | MapServer has heap buffer overflow in SLD `Categorize` Threshold parsing Affected: 4.2.0 before 8.6.1 |
| CVE-2010-1678 | 7.5 | Oct 29 | Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing Affected: 5.6.0 before 5.6.5.-2; 5.2.0; 5.4.0 |
| CVE-2016-9839 | 7.5 | Dec 8 | In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails Affected: through 7.0.2 |
Showing 4