Known Vulnerabilities for Zlib by Zlib Software
Listed below are 10 of the newest known vulnerabilities associated with "Zlib" by "Zlib Software".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-89717 json | In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_destroy_com... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-87776 json | compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection wh... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-85091 json | zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing ... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-85024 json | undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib in... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-77640 json | tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated st... | Not Provided | 2026-08-20 | 2026-08-21 |
| CVE-2026-77639 json | Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams,... | Not Provided | 2026-08-20 | 2026-08-21 |
| CVE-2026-74767 json | Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the ... | Not Provided | 2026-08-15 | 2026-08-17 |
| CVE-2026-70631 json | FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the n... | Not Provided | 2026-08-06 | 2026-08-14 |
| CVE-2026-70630 json | FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native ... | Not Provided | 2026-08-06 | 2026-08-14 |
| CVE-2026-69659 json | Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node via a... | Not Provided | 2026-08-09 | 2026-08-10 |