Vendor
Ollama
32 known vulnerabilities in products by Ollama, 0 of them actively exploited (CISA KEV).
Key figures
32
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-37032 | Ollama: security vulnerability | 8.8 | |
| Critical | CVE-2026-7482 | Ollama: Out-of-bounds Read | 9.1 | |
| High | CVE-2025-0317 | Divide By Zero in ollama/ollama | 7.5 | |
| Medium | CVE-2025-51471 | Ollama: security vulnerability | 6.9 | |
| High | CVE-2025-66959 | Ollama: Denial of Service | 7.5 | |
| High | CVE-2024-39719 | Ollama: security vulnerability | 7.5 | |
| High | CVE-2024-39722 | Ollama: Path Traversal | 7.5 | |
| High | CVE-2024-39720 | Ollama: security vulnerability | 8.2 | |
| High | CVE-2024-39721 | Ollama: security vulnerability | 7.5 | |
| Critical | CVE-2024-45436 | Ollama: security vulnerability | 7.5 | |
| Critical | CVE-2026-42249 | Remote Code Execution in Ollama via Update Mechanism | 9.8 | |
| High | CVE-2026-65315 | Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser | 7.5 | |
| Critical | CVE-2026-42248 | Missing Signature Verification for Updates in Ollama | 9.8 | |
| Medium | CVE-2026-103663 | Path Traversal leading to Remote Code Execution in Ollama | — | |
| Critical | CVE-2025-63389 | Ollama: Authentication Bypass | 9.8 | |
| High | CVE-2026-85180 | Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect | 7.5 | |
| High | CVE-2025-15514 | Ollama Multi-Modal Model Image Processing NULL Pointer Dereference | 7.5 | |
| High | CVE-2026-15685 | Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability | 7.5 | |
| High | CVE-2026-5757 | Ollama: Out-of-bounds Read | 7.5 | |
| High | CVE-2026-108836 | Ollama Pull API name.go IsValid server-side request forgery | 7.3 | |
| Medium | CVE-2026-7020 | Ollama Tensor Model Transfer transfer.go digestToPath path traversal | 3.7 | |
| Medium | CVE-2026-86289 | Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow | 4.3 | |
| High | CVE-2026-102697 | Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization | 7.8 | |
| High | CVE-2024-12055 | DoS using malicious gguf model file in ollama/ollama | 7.5 | |
| High | CVE-2024-12886 | Out-Of-Memory (OOM) Vulnerability in ollama/ollama | 7.5 |
News
Products
| Ollama | 31 | 0 |
| Ollama/ollama | 7 | 0 |