Vendor
Varnish-Software
18 known vulnerabilities in products by Varnish-Software, 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-8671 | SUSE Linux Enterprise Module for Development Tools: Denial of Service | 7.5 | |
| High | CVE-2019-15892 | Varnish Cache: Denial of Service | 7.5 | |
| Critical | CVE-2022-23959 | Varnish Cache: security vulnerability | 9.1 | |
| High | CVE-2017-12425 | Varnish: Integer Overflow | 7.5 | |
| High | CVE-2020-11653 | Varnish Cache: security vulnerability | 7.5 | |
| High | CVE-2019-20637 | Varnish Cache: security vulnerability | 7.5 | |
| Critical | CVE-2026-34475 | Varnish-Software Varnish Cache: Incorrect Behavior Order: Validate Before Canonicalize | 9.8 | |
| Medium | CVE-2021-36740 | Varnish Cache: security vulnerability | 6.5 | |
| High | CVE-2022-45060 | Varnish Cache: security vulnerability | 7.5 | |
| Medium | CVE-2025-30346 | Varnish-Software Varnish Cache: HTTP Request/Response Smuggling | 5.4 | |
| High | CVE-2026-40396 | Varnish-Software Varnish Cache: Always-Incorrect Control Flow Implementation | 7.5 | |
| Medium | CVE-2025-47905 | Varnish-Software Varnish Cache: HTTP Request/Response Smuggling | 5.4 | |
| High | CVE-2026-40395 | Varnish-Software Varnish Enterprise: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-40394 | Varnish-Software Varnish Cache: Always-Incorrect Control Flow Implementation | 7.5 | |
| Medium | CVE-2023-41104 | Varnish Enterprise: Out-of-Bounds Access | 6.5 | |
| Low | CVE-2026-93894 | Vinyl Cache: Out-of-bounds Write | — | |
| Low | CVE-2026-50052 | The Vinyl Cache Project Vinyl Cache: HTTP Request/Response Smuggling | — | |
| High | CVE-2025-30347 | Varnish-Software Varnish Enterprise: Out-of-bounds Read | 4.0 |
Products
| Varnish Cache | 14 | 0 |
| Varnish Enterprise | 9 | 0 |