zlib
Security Risk Profile
34
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 26 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 15, 2002 to present
26
Total CVEs
13
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
7.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
34/100
low
Severity Distribution
Critical
5High
8Medium
5Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
8
2
Integer Overflow
3
3
Race Condition
3
4
Use After Free
2
5
Input Validation
2
Most Affected Products
1. zlib zlib39
2. Nodejs Node.js20
3. Apple iOS and macOS19
4. redhat/zlib18
5. Oracle MySQL16
Recent Vulnerabilities
See more →CVE-2026-27171
CVSS 5.5EPSS 0%medium
2/18/2026
https://seclists.org/oss-sec/2026/q1/175
unknown
zlib security audit by 7asecurity
2/17/2026🔧 No Patch
https://seclists.org/oss-sec/2026/q1/72
unknown
Fwd: [FD] zlib v1.3.1.2 Global Buffer Overflow in TGZfname() of zlib untgz Utility via Unbounded strcpy() on User-Supplied Archive Name
1/15/2026🔧 No Patch
REDHAT-BUG-2427688
CVSS 7.0high
1/7/2026🔧 No Patch
CVE-2026-22184
CVSS 4.6EPSS 0%medium
zlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()
1/7/2026🔧 No Patch
https://reddit.com/r/sysadmin/comments/1nok0ze/questions_about_trivy_for_container_image_scans/
unknown
Questions about Trivy for container image scans
9/23/2025🔧 No Patch
REDHAT-BUG-2366317
CVSS 7.0high
5/14/2025🔧 No Patch
https://seclists.org/oss-sec/2025/q1/110
unknown
[SECURITY ADVISORY] curl: CVE-2025-0725: gzip integer overflow
2/5/2025🔧 No Patch
CVE-2025-0725
CVSS 7.3high
gzip integer overflow
2/5/2025
https://seclists.org/oss-sec/2025/q1/101
unknown
[SECURITY ADVISORY] curl: CVE-2025-0725: gzip integer overflow
2/5/2025🔧 No Patch
Monitor zlib in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.