Vendors / Cewe Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Cewe records in CISA KEV No Cewe vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 64
CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers to crash the application by importing a specially crafted image file.
CVSS 4.0 MEDIUM 6.9· Local · No auth · No interaction · EPSS 0.00176 · Published 2026-03-21 · No fix listed CWE-226
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0