ollama ollama

Name: ollama ollama
Brand: ollama

productUS

cpe:2.3:a:ollama:ollama:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical7high0medium0low

updated 2026-10-27

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-37032US	—	89.6% (100th)	Exploit	0.1.34	2024-05-31	< 0.1.34
CVE-2025-51471US	—OT elevated	18.5% (97th)	Exploit	no fix	2025-07-22	= 0.6.7
CVE-2024-39719US	—	4.24% (91st)	Exploit	no fix	2024-10-31	≤ 0.3.14
CVE-2024-39722US	—	3.97% (90th)	Exploit	0.1.46	2024-10-31	< 0.1.46
CVE-2024-45436US	high7.5	2.56% (85th)	Exploit	0.1.47	2024-08-29	< 0.1.47
CVE-2026-7482US	—	2.24% (83rd)	Exploit	0.17.1	2026-05-04	< 0.17.1
CVE-2026-42249US	critical9.8OT high	1.05% (64th)	Exploit	no fix	2026-04-29	0.12.10 → 0.17.5
CVE-2026-7020US	—	0.91% (60th)	Exploit	no fix	2026-04-26	0.20.0 → 0.20.2
CVE-2026-42248US	critical9.8OT high	0.73% (54th)	Exploit	no fix	2026-04-29	0.12.10 → 0.17.5
CVE-2025-0317US	high7.5	14.5% (97th)	—	no fix	2025-03-20	≤ 0.3.14
CVE-2025-66959US	—	5.33% (93rd)	—	no fix	2026-01-21	= 0.12.10
CVE-2024-39721US	—	2.64% (86th)	—	0.1.34	2024-10-31	< 0.1.34
CVE-2024-39720US	—	2.44% (84th)	—	0.1.46	2024-10-31	< 0.1.46
CVE-2024-12055US	high7.5	0.82% (57th)	—	no fix	2025-03-20	≤ 0.3.14
CVE-2025-15514US	high7.5	0.77% (55th)	—	no fix	2026-01-12	2 versions
CVE-2026-5757US	—	0.73% (54th)	—	no fix	2026-06-26	≤ 0.13.5
CVE-2026-15685US	—	0.71% (54th)	—	no fix	2026-07-13	= 0.7.1
CVE-2025-63389US	—OT elevated	0.71% (53rd)	—	no fix	2025-12-18	≤ 0.12.3
CVE-2025-0315US	high7.5	0.66% (51st)	—	no fix	2025-03-20	≤ 0.3.14
CVE-2025-0312US	high7.5	0.64% (51st)	—	no fix	2025-03-20	≤ 0.3.14
CVE-2024-8063US	high7.5	0.64% (51st)	—	no fix	2025-03-20	= 0.3.3
CVE-2025-1975US	—	0.52% (44th)	—	no fix	2025-05-16	= 0.5.11
CVE-2025-66960US	—	0.43% (37th)	—	no fix	2026-01-21	= 0.12.10
CVE-2024-28224US	—	0.35% (29th)	—	0.1.29	2024-04-08	< 0.1.29
CVE-2025-44779US	—	0.18% (8th)	—	no fix	2025-08-07	= 0.1.33

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-129Improper Validation of Array Index2 CVEs
CWE-369Divide By Zero2 CVEs
CWE-494Download of Code Without Integrity Check2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan