Product by Debian
Perl
26 known vulnerabilities in Perl (Debian), 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
11
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-18312 | Perl: Buffer Overflow | 9.8 | |
| Critical | CVE-2018-18311 | Perl: Buffer Overflow | 9.8 | |
| Critical | CVE-2018-6913 | Perl: Heap-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2018-6797 | Perl: Heap-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2018-18314 | Perl: Buffer Overflow | 9.8 | |
| Critical | CVE-2018-18313 | Perl: Buffer Over-read | 9.1 | |
| High | CVE-2016-2381 | Perl: security vulnerability | 7.5 | |
| High | CVE-2018-12015 | Perl: security vulnerability | 7.5 | |
| High | CVE-2018-6798 | Perl: Buffer Over-read | 7.5 | |
| Critical | CVE-2026-57433 | HAARG Storable: Integer Overflow or Wraparound | 9.8 | |
| Critical | CVE-2026-12087 | Socket versions before 2.041 for Perl have an out-of-bounds heap read | 9.1 | |
| Critical | CVE-2026-13221 | Perl: Integer Overflow or Wraparound | 9.1 | |
| Critical | CVE-2026-42496 | BINGOS Archive::Tar: Link Following | 9.1 | |
| High | CVE-2026-48962 | PMQS IO::Compress: Eval Injection | 7.3 | |
| High | CVE-2026-48959 | PMQS IO::Uncompress::Unzip: Inefficient Algorithmic Complexity | 7.5 | |
| Critical | CVE-2026-8376 | Perl: Integer Overflow to Buffer Overflow | 5.7 | |
| Medium | CVE-2025-40909 | Perl: Untrusted Search Path | 5.9 | |
| High | CVE-2026-42497 | BINGOS Archive::Tar: Link Following | 7.5 | |
| Medium | CVE-2026-19487 | Perl: Always-Incorrect Control Flow Implementation | 5.3 | |
| High | CVE-2024-56406 | Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes | 8.4 | |
| High | CVE-2016-6185 | Perl: Code Execution | 7.8 | |
| High | CVE-2026-57432 | Perl: Out-of-bounds Read | 8.4 | |
| High | CVE-2016-1238 | Perl: Privilege Escalation | 7.8 | |
| High | CVE-2026-7017 | HAARG HTTP::Tiny: Insufficiently Protected Credentials | 7.1 | |
| Medium | CVE-2026-7010 | HAARG HTTP::Tiny: HTTP Request/Response Splitting | 6.5 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 28sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 25sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 24sans-atrisk-mail,