cabextract project cabextract

Name: cabextract project cabextract
Brand: cabextract project

productUS

cpe:2.3:a:cabextract_project:cabextract:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical2high7medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2010-2801US	medium5.1	4.03% (91st)	—	no fix	2010-08-09	9 versions
CVE-2018-14681US	high8.8	3.76% (90th)	—	no fix	2018-07-28	≤ 1.5
CVE-2018-14680US	medium6.5	3.71% (90th)	—	no fix	2018-07-28	≤ 1.5
CVE-2018-14682US	high8.8	3.61% (89th)	—	no fix	2018-07-28	≤ 1.5
CVE-2004-0916US	medium5.0	3.59% (89th)	—	no fix	2005-01-27	3 versions
CVE-2018-14679US	medium6.5	3.27% (88th)	—	no fix	2018-07-28	≤ 1.5
CVE-2018-18584US	medium6.5	2.66% (86th)	—	1.8	2018-10-23	< 1.8
CVE-2015-2060US	medium5.3	2.31% (83rd)	—	1.6	2019-11-29	< 1.6
CVE-2010-2800US	medium4.3	2.29% (83rd)	—	no fix	2010-08-09	9 versions

The flaw types (CWEs) most of these CVEs share.

CWE-193Off-by-one Error3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-189CWE-1891 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-399CWE-3991 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.