Read the docs

Exiftool Project

Records4All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Exiftool Project records in CISA KEV
TI-2021-05190 ExifTool Remote Code Execution Vulnerability Priority CRITICAL 91KEV 2021-11-17

Components

Products in the NVD configurations · select one to filter the records
Exiftool 4 records CRITICAL

Records

4 records

TI-2021-05190 CVE-2021-22204 · GHSA-9377-7hwr-p4w6

Code injection in ExifTool

Priority CRITICAL 91KEV

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.99981 Published 2021-04-23 Fixed in 12.24 CWE-94
TI-2018-14322 CVE-2018-20211 · GHSA-cj4c-xvfc-fw73

ExifTool 8.32 allows local users to gain privileges by creating a…

Priority LOW 37

ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with a victim's username, and then copying a Trojan horse ws32_32.dll file into this new folder, aka DLL…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01378 Published 2019-01-02 No fix listed CWE-427
Open these records in search →