Vendor
W3C
13 known vulnerabilities in products by W3C, 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Not rated | CVE-2008-5282 | W3C Amaya Web Browser: Stack-Based Buffer Overflow | — | |
| Not rated | CVE-2006-1900 | W3C Amaya: Buffer Overflow | — | |
| Not rated | CVE-2008-6005 | W3C Amaya Web Browser: Buffer Overflow | — | |
| Not rated | CVE-2002-1445 | W3C Cern Httpd: Cross-Site Scripting (XSS) | — | |
| Medium | CVE-2026-50571 | WebSub: Reflected script execution through intent-verification challenges | 5.7 | |
| Not rated | CVE-2002-1052 | W3C Jigsaw: Denial of Service | — | |
| High | CVE-2025-1781 | W3C CSS Validator: Improper Restriction of XML External Entity Reference | 6.5 | |
| Not rated | CVE-2005-3183 | W3C Libwww: Out-of-Bounds Read | — | |
| Not rated | CVE-2002-1053 | W3C Jigsaw: Cross-Site Scripting (XSS) | — | |
| Not rated | CVE-2000-0079 | W3C Cern Httpd: security vulnerability | — | |
| Medium | CVE-2020-4070 | Cross-site Scripting in CSS Validator | 4.6 | |
| Not rated | CVE-2004-2274 | W3C Jigsaw: security vulnerability | — | |
| Medium | CVE-2014-125108 | w3c online-spellchecker-py spellchecker cross site scripting | 3.1 |
News
Products
| Jigsaw | 3 | 0 |