Read the docs

Calibre

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

Calibre records in CISA KEV

No Calibre vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Calibre 20 records HIGH

Records

21 records

TI-2024-06285 CVE-2024-6782 · GHSA-g8v6-86f6-jj9q

Calibre Remote Code Execution

Priority CRITICAL 90

Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.84116 Published 2024-08-06 No fix listed CWE-863
TI-2024-06284 CVE-2024-6781 · GHSA-p89v-3g23-m6q2

Calibre Arbitrary File Read

Priority HIGH 74

Path traversal in Calibre <= 7.14.0 allow unauthenticated attackers to achieve arbitrary file read.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.62442 Published 2024-08-06 No fix listed CWE-22
TI-2026-25627 CVE-2026-33206

calibre has a path traversal vulnerability

Priority HIGH 69

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.

CVSS 4.0HIGH 8.2 Local No auth User interaction EPSS 0.00216 Published 2026-03-27 Fixed in 9.6.0 CWE-23
TI-2024-06504 CVE-2024-7009 · GHSA-mc4x-r58f-6h93

Calibre SQL Injection

Priority MEDIUM 64

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.13922 Published 2024-08-06 No fix listed CWE-89
TI-2026-22163 CVE-2026-27810

calibre Vulnerable to HTTP Response Header Injection

Priority MEDIUM 62

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00242 Published 2026-02-27 Fixed in 9.4.0 CWE-113
TI-2024-06503 CVE-2024-7008 · GHSA-5q8g-5hhx-x3c8

Calibre Reflected Cross-Site Scripting (XSS)

Priority MEDIUM 60

Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.25607 Published 2024-08-06 No fix listed CWE-79
TI-2011-03642 CVE-2011-4125 · GHSA-m2cr-mfg2-6hxg

Untrusted search path in Calibre

Priority MEDIUM 46

A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02308 Published 2021-10-27 No fix listed CWE-426
TI-2011-03641 CVE-2011-4124 · GHSA-989w-w345-v363

Improper input validation in Calibre

Priority MEDIUM 46

Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and elevation of privileges.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02308 Published 2021-10-27 No fix listed CWE-20
TI-2011-03643 CVE-2011-4126 · GHSA-m85p-c5xr-7h82

Time-of-check time-of-use race condition in Calibre

Priority LOW 38

Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to mount any device to anywhere.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01539 Published 2021-10-27 No fix listed CWE-367
Open these records in search →