Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Xz
MEDIUM 5.3
CVE-2026-34743
XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to deco…
Fix: 5.8.3+
Fix from $1,600
2026-04-02
Xz
CRITICAL 10.0
CVE-2024-3094EPSS 86%
Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma bu…
Mitigation only
Fix from $2,300
2024-03-29
Xz
MEDIUM 5.5
CVE-2020-22916
An issue discovered in XZ 5.2.5 allows attackers to cause a denial of service via decompression of a crafted file. NOTE: the vendor disputes the clai…
Mitigation only
Fix from $1,600
2023-08-22
Xz
HIGH 7.8
CVE-2015-4035
scripts/xzgrep.in in xzgrep 5.2.x before 5.2.0, before 5.0.0 does not properly process file names containing semicolons, which allows remote attacker…
Fix: after 4.999.9
Fix from $1,950
2017-07-25