irfanview irfanview

Name: irfanview irfanview
Brand: irfanview

productUS

cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical252high17medium2low

updated 2026-10-28

vulnerabilities (271)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2012-0897US	medium6.8	52.2% (99th)	Exploit	no fix	2012-01-20	86 versions
CVE-2011-5233US	medium4.3	9.32% (95th)	Exploit	no fix	2012-10-25	15 versions
CVE-2007-2363US	high8.5	8.94% (95th)	Exploit	no fix	2007-04-30	≤ 4.00
CVE-2008-0493US	high9.3	8.68% (95th)	Exploit	no fix	2008-01-30	= 4.10
CVE-2007-1948US	high9.3	8.26% (95th)	Exploit	no fix	2007-04-11	= 3.99
CVE-2007-1867US	high10.0	7.91% (95th)	Exploit	no fix	2007-04-04	= 3.99
CVE-1999-1112US	high7.5	3.85% (90th)	Exploit	no fix	1999-11-09	≤ 3.0.7
CVE-2006-4374US	low2.6	2.70% (86th)	Exploit	no fix	2006-08-26	= 3.98
CVE-2020-23546US	high7.8	0.96% (61st)	Exploit	no fix	2021-10-28	= 4.54
CVE-2013-6932US	high7.6	5.75% (93rd)	—	no fix	2013-12-28	12 versions
CVE-2012-5904US	medium6.8	5.73% (93rd)	—	no fix	2012-11-17	82 versions
CVE-2013-5351US	high7.5	5.03% (92nd)	—	no fix	2014-02-14	89 versions
CVE-2010-1510US	medium5.0	4.50% (91st)	—	no fix	2010-05-14	81 versions
CVE-2020-35133US	high7.5	4.44% (91st)	—	no fix	2020-12-16	= 4.56
CVE-2010-1509US	medium5.0	3.66% (90th)	—	no fix	2010-05-14	81 versions
CVE-2020-13905US	high8.8	3.31% (88th)	—	no fix	2020-06-10	= 4.54
CVE-2007-4343US	medium5.1	2.89% (87th)	—	no fix	2007-10-16	2 versions
CVE-2017-8370US	high7.8	2.83% (87th)	—	no fix	2017-07-05	= 4.44
CVE-2017-9528US	high7.8	2.71% (86th)	—	no fix	2017-07-05	= 4.44
CVE-2017-15257US	high7.8	2.54% (85th)	—	no fix	2017-10-11	= 4.44
CVE-2017-15253US	high7.8	2.54% (85th)	—	no fix	2017-10-11	= 4.44
CVE-2017-15252US	high7.8	2.54% (85th)	—	no fix	2017-10-11	= 4.44
CVE-2017-15251US	high7.8	2.54% (85th)	—	no fix	2017-10-11	= 4.44
CVE-2017-15249US	high7.8	2.54% (85th)	—	no fix	2017-10-11	= 4.44
CVE-2017-15248US	high7.8	2.54% (85th)	—	no fix	2017-10-11	= 4.44
CVE-2017-15246US	high7.8	2.54% (85th)	—	no fix	2017-10-11	= 4.44
CVE-2017-15242US	high7.8	2.54% (85th)	—	no fix	2017-10-11	= 4.44
CVE-2019-17252US	high7.8	2.53% (85th)	—	no fix	2019-10-08	= 4.53
CVE-2009-2118US	medium6.8	2.51% (85th)	—	no fix	2009-06-18	= 4.23
CVE-2017-10924US	high7.8	2.48% (84th)	—	no fix	2017-07-05	= 4.44
CVE-2019-17254US	high7.8	2.46% (84th)	—	no fix	2019-10-08	= 4.53
CVE-2017-15759US	high7.8	2.45% (84th)	—	no fix	2017-10-22	= 4.50
CVE-2017-15758US	high7.8	2.45% (84th)	—	no fix	2017-10-22	= 4.50
CVE-2017-15756US	high7.8	2.44% (84th)	—	no fix	2017-10-22	= 4.50
CVE-2017-15754US	high7.8	2.44% (84th)	—	no fix	2017-10-22	= 4.50
CVE-2017-15752US	high7.8	2.44% (84th)	—	no fix	2017-10-22	= 4.50
CVE-2017-15748US	high7.8	2.44% (84th)	—	no fix	2017-10-22	= 4.50
CVE-2017-15740US	high7.8	2.24% (83rd)	—	no fix	2017-10-22	= 4.50
CVE-2017-15739US	high7.8	2.24% (83rd)	—	no fix	2017-10-22	= 4.50
CVE-2017-15747US	high7.8	2.23% (83rd)	—	no fix	2017-10-22	= 4.50
CVE-2017-15744US	high7.8	2.23% (83rd)	—	no fix	2017-10-22	= 4.50
CVE-2019-13242US	high7.8	2.18% (82nd)	—	no fix	2019-07-04	= 4.52
CVE-2017-9915US	high7.8	2.17% (82nd)	—	no fix	2017-07-05	= 4.44
CVE-2019-13243US	high7.8	2.09% (82nd)	—	no fix	2019-07-04	= 4.52
CVE-2017-9883US	high7.8	2.09% (82nd)	—	no fix	2017-07-05	= 4.44
CVE-2017-9882US	high7.8	2.09% (82nd)	—	no fix	2017-07-05	= 4.44
CVE-2017-9881US	high7.8	2.09% (82nd)	—	no fix	2017-07-05	= 4.44
CVE-2017-9880US	high7.8	2.09% (82nd)	—	no fix	2017-07-05	= 4.44
CVE-2017-9536US	high7.8	2.09% (82nd)	—	no fix	2017-07-05	= 4.44
CVE-2017-9535US	high7.8	2.09% (82nd)	—	no fix	2017-07-05	= 4.44

showing 50 of 271

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer155 CVEs
CWE-787Out-of-bounds Write95 CVEs
CWE-125Out-of-bounds Read20 CVEs
CWE-122Heap-based Buffer Overflow8 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')6 CVEs
CWE-124Buffer Underwrite ('Buffer Underflow')5 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-416Use After Free5 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE271 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan