Brand
ImageMagick: actively exploited vulnerabilities
3 vulnerabilities in ImageMagick products (ImageMagick) are in CISA’s catalog of exploited vulnerabilities. Last added: September 9, 2024.
-
0 vulnerabilities added in the last 12 months
-
3 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one ImageMagick category to your radar, or open its page.
- Frameworks and libraries 3 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- ImageMagick 3 vulnerabilities · Frameworks
Name used by CISA: ImageMagick. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this ImageMagick list.
Rank 1ImageMagick
CVE-2016-3714CVE from 2016, added in 2024
ImageMagick Improper Input Validation Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Sep 9, 2024
- CISA deadline
- 21 days
- CVSS severity
- 8.4 (high)
Rank 2ImageMagick
CVE-2016-3715CVE from 2016, added in 2021
ImageMagick Arbitrary File Deletion Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 5.5 (medium)
Rank 3ImageMagick
CVE-2016-3718CVE from 2016, added in 2021
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 5.5 (medium)
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.