Product by MapServer

MapServer

22 known vulnerabilities in MapServer (MapServer), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in MapServer (MapServer)

Critical	CVE-2017-5522	MapServer: Stack-Based Buffer Overflow also in 1 other product	9.8	15.03.2017
High	CVE-2010-1678	MapServer: security vulnerability	7.5	29.10.2019
High	CVE-2016-9839	MapServer: security vulnerability	7.5	08.12.2016
High	CVE-2026-33721	MapServer has heap buffer overflow in SLD `Categorize` Threshold parsing also in 2 other products	5.3	27.03.2026
Not rated	CVE-2009-0839	MapServer: Stack-Based Buffer Overflow also in 1 other product	—	31.03.2009
Medium	CVE-2021-32062	MapServer: security vulnerability also in 2 other products	5.3	05.05.2021
Critical	CVE-2025-59431	MapServer - WFS XML Filter Query SQL injection also in 2 other products	9.8	19.09.2025
Not rated	CVE-2009-2281	MapServer: Heap-Based Buffer Overflow also in 1 other product	—	23.10.2009
Not rated	CVE-2009-0841	MapServer: Path Traversal also in 1 other product	—	31.03.2009
Not rated	CVE-2009-0840	MapServer: security vulnerability also in 1 other product	—	31.03.2009
Not rated	CVE-2011-2704	MapServer: Stack-Based Buffer Overflow also in 1 other product	—	01.08.2011
Not rated	CVE-2011-2975	MapServer: Double Free also in 1 other product	—	01.08.2011
Not rated	CVE-2009-1176	MapServer: security vulnerability also in 1 other product	—	31.03.2009
Not rated	CVE-2010-2540	MapServer: security vulnerability also in 1 other product	—	02.08.2010
Not rated	CVE-2009-0843	MapServer: security vulnerability also in 1 other product	—	31.03.2009
High	CVE-2026-45104	MapServer: NULL pointer dereference in SLD `<ElseFilter>` rule parsing reachable via WMS `SLD_BODY` also in 1 other product	7.5	27.05.2026
Not rated	CVE-2009-1177	MapServer: Stack-Based Buffer Overflow also in 1 other product	—	31.03.2009
Not rated	CVE-2011-2703	MapServer: SQL Injection also in 1 other product	—	01.08.2011
Not rated	CVE-2009-0842	MapServer: security vulnerability also in 1 other product	—	31.03.2009
Not rated	CVE-2013-7262	MapServer: SQL Injection also in 1 other product	—	05.01.2014
Medium	CVE-2026-42030	MapServer: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) also in 1 other product	6.1	08.05.2026
Not rated	CVE-2010-2539	MapServer: Buffer Overflow also in 1 other product	—	02.08.2010

All products by MapServer

Key figures

Vulnerabilities