Login Request a demo
XZ
Product
XZ
by Tukaani · last CVE Apr 2, 2026
5
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities5Critical1High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add XZ to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-3094
10.0
91%
Mar 29
Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0
Affected: 5.6.0; 5.6.1
CVE-2022-1271
8.8
6%
Aug 31
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility
Affected: before 5.2.5
CVE-2015-4035
7.8
1%
Jul 25
scripts/xzgrep.in in xzgrep 5.2.x before 5.2.0, before 5.0.0 does not properly process file names containing semicolons, which allows remote attackers to execute arbitrary code by…
Affected: through 4.999.9
CVE-2020-22916
5.5
0%
Aug 22
An issue discovered in XZ 5.2.5 allows attackers to cause a denial of service via decompression of a crafted file
Affected: 5.2.5
CVE-2026-34743
5.3
1%
Apr 2
XZ Utils: Buffer overflow in lzma_index_append()
Affected: before 5.8.3
Showing 5