The GIMP Team GIMP

Name: The GIMP Team GIMP
Brand: The GIMP Team

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

critical

by severity

0critical9high8medium0low

updated 2026-10-27

vulnerabilities (43)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44443US	—	93.6% (100th)	—	no fix	2024-05-03	≤ 2.10.36
CVE-2023-44442US	—	61.2% (99th)	—	no fix	2024-05-03	≤ 2.10.36
CVE-2023-44444US	—	56.1% (99th)	—	no fix	2024-05-03	≤ 2.10.36
CVE-2025-5473US	high8.8	23.5% (98th)	—	no fix	2025-06-06	≤ 3.0.4
CVE-2025-2760US	high7.8	17.2% (97th)	—	no fix	2025-04-23	≤ 3.0.0
CVE-2026-2045US	—	5.29% (93rd)	—	no fix	2026-02-20	≤ 3.0.6
CVE-2025-2761US	high7.8	4.17% (91st)	—	no fix	2025-04-23	≤ 3.0.0
CVE-2025-10925US	—	3.03% (87th)	—	no fix	2025-10-29	≤ 2.10.36
CVE-2026-0797US	—	1.32% (71st)	—	no fix	2026-02-20	≤ 3.2.0
CVE-2026-2044US	—	1.11% (66th)	—	no fix	2026-02-20	≤ 3.0.6
CVE-2026-2272US	medium6.5	0.87% (59th)	—	no fix	2026-03-26	≤ 3.0.6
CVE-2025-15059US	—	0.84% (58th)	—	no fix	2026-01-23	≤ 3.0.8
CVE-2025-10922US	—	0.83% (57th)	—	no fix	2025-10-29	≤ 3.0.6
CVE-2022-30067US	medium5.5	0.76% (55th)	—	no fix	2022-05-17	2 versions
CVE-2026-4152US	—	0.74% (55th)	—	no fix	2026-04-11	≤ 3.0.8
CVE-2026-4150US	—	0.74% (54th)	—	no fix	2026-04-11	≤ 3.0.8
CVE-2026-2048US	—	0.71% (53rd)	—	no fix	2026-02-20	≤ 3.2.0
CVE-2026-2047US	—	0.71% (53rd)	—	no fix	2026-02-20	—
CVE-2022-32990US	medium5.5	0.67% (52nd)	—	no fix	2022-06-24	≤ 2.10.30
CVE-2026-4151US	—	0.66% (52nd)	—	no fix	2026-04-11	≤ 3.0.8
CVE-2025-14425US	—	0.66% (51st)	—	no fix	2025-12-23	≤ 3.2.0
CVE-2026-4887US	high7.1	0.65% (51st)	—	no fix	2026-03-26	≤ 3.2.0
CVE-2026-4153US	—	0.64% (50th)	—	no fix	2026-04-11	≤ 3.0.8
CVE-2025-14422US	—	0.62% (50th)	—	no fix	2025-12-23	≤ 3.2.0
CVE-2026-4154US	—	0.60% (48th)	—	no fix	2026-04-11	≤ 3.0.8
CVE-2025-6035US	—	0.59% (48th)	—	no fix	2025-06-13	—
CVE-2025-10934US	—	0.58% (48th)	—	no fix	2025-10-29	≤ 3.0.4
CVE-2026-2271US	medium5.5	0.51% (44th)	—	no fix	2026-03-26	≤ 3.0.8
CVE-2026-2239US	medium6.5	0.50% (43rd)	—	no fix	2026-03-26	2 versions
CVE-2026-59087US	high7.8	0.49% (42nd)	—	no fix	2026-08-10	≤ 3.2.4
CVE-2025-10924US	—	0.47% (41st)	—	no fix	2025-10-29	≤ 2.10.36
CVE-2025-10923US	—	0.47% (41st)	—	no fix	2025-10-29	≤ 2.10.36
CVE-2025-10920US	—	0.47% (41st)	—	no fix	2025-10-29	≤ 3.0.6
CVE-2026-40915US	high7.8	0.38% (31st)	—	no fix	2026-04-15	≤ 3.2.2
CVE-2026-40919US	medium5.5	0.33% (26th)	—	no fix	2026-04-15	≤ 3.2.2
CVE-2026-78465US	high7.0	0.28% (20th)	—	no fix	2026-08-24	2 versions
CVE-2025-48797US	—	0.28% (20th)	—	no fix	2025-05-27	—
CVE-2026-6384US	high7.8	0.26% (18th)	—	no fix	2026-04-15	≤ 3.2.2
CVE-2026-80101US	medium4.4	0.23% (14th)	—	no fix	2026-08-25	≤ 3.3.1
CVE-2026-40916US	medium5.5	0.21% (11th)	—	no fix	2026-04-15	≤ 3.2.2
CVE-2026-40918US	—	0.20% (9th)	—	no fix	2026-04-15	≤ 3.2.2
CVE-2026-40917US	high7.1	0.17% (6th)	—	no fix	2026-04-15	≤ 3.2.2

showing 42 of 43

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write16 CVEs
CWE-190Integer Overflow or Wraparound14 CVEs
CWE-122Heap-based Buffer Overflow10 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')4 CVEs
CWE-131Incorrect Calculation of Buffer Size3 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-193Off-by-one Error2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)42 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan