w
w3c
Security Risk Profile
33
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 18, 2000 to present
13
Total CVEs
6
Critical+High
0
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
6.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
33/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
2High
4Medium
7Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
4
2
Buffer Overflow
3
3
SSRF
2
4
XEE
1
5
Input Validation
1
Most Affected Products
1. W3C Jigsaw15
2. W3C Amaya Web Browser3
3. W3C CERN httpd2
4. W3C WebSub1
5. W3C W3CSS Validator1
Recent Vulnerabilities
See more →CVE-2026-50571
CVSS 5.7medium
WebSub: Reflected script execution through intent-verification challenges
Oct 27, 2026🔧 No Patch
CVE-2025-1781
CVSS 8.4high
Mar 28, 2025🔧 No Patch
CVE-2024-34581
CVSS 7.3high
Jun 26, 2024🔧 No Patch
CVE-2020-4070
CVSS 5.4medium
Cross-site Scripting in CSS Validator
Jun 22, 2020
CVE-2008-6005
CVSS 10.0critical
Jan 28, 2009🔧 No Patch
CVE-2008-5282
CVSS 10.0critical
Nov 29, 2008🔧 No Patch
CVE-2006-1900
CVSS 7.6high
Apr 20, 2006
CVE-2005-3183
CVSS 4.3medium
Oct 12, 2005🔧 No Patch
CVE-2004-2274
CVSS 6.4medium
Dec 31, 2004
CVE-2002-1053
CVSS 6.8medium
Oct 4, 2002
Monitor w3c in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.