zsh zsh

Name: zsh zsh
Brand: zsh

productUS

cpe:2.3:a:zsh:zsh:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

6critical5high2medium0low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-18206US	critical9.8	3.11% (88th)	—	5.4	2018-02-27	< 5.4
CVE-2018-13259US	critical9.8	2.72% (86th)	—	5.6	2018-09-05	< 5.6
CVE-2014-10071US	critical9.8	2.71% (86th)	—	5.0.7	2018-02-27	< 5.0.7
CVE-2018-7549US	high7.5	2.59% (85th)	—	no fix	2018-02-27	≤ 5.4.2
CVE-2018-7548US	critical9.8	2.54% (85th)	—	no fix	2018-02-27	≤ 5.4.2
CVE-2018-0502US	critical9.8	2.49% (85th)	—	5.6	2018-09-05	< 5.6
CVE-2016-10714US	critical9.8	2.13% (82nd)	—	5.3	2018-02-27	< 5.3
CVE-2021-45444US	high7.8	1.98% (80th)	—	5.8.1	2022-02-14	< 5.8.1
CVE-2018-1083US	high7.8	0.59% (48th)	—	no fix	2018-03-28	≤ 5.4.1
CVE-2018-1100US	high7.8	0.53% (45th)	—	no fix	2018-04-11	≤ 5.4.2
CVE-2019-20044US	high7.8	0.50% (42nd)	—	5.8	2020-02-24	< 5.8
CVE-2018-1071US	medium5.5	0.43% (37th)	—	no fix	2018-03-09	≤ 5.4.2
CVE-2007-6209US	medium4.6	0.33% (25th)	—	no fix	2007-12-04	= 4.3.4

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-189CWE-1891 CVEs
CWE-264CWE-2641 CVEs
CWE-271Privilege Dropping / Lowering Errors1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.