artifex
Security Risk Profile
41
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 278 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 14, 2010 to present
278
Total CVEs
158
Critical+High
1
Exploited
54
Unpatched
Threat Assessment
Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
54
Critical/High
Risk Level
41/100
medium
⚠️ 1 Active Exploits📈 1 in Last 30 Days
Severity Distribution
Critical
33High
125Medium
113Low
3Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
16Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
90
2
Integer Overflow
23
3
Use After Free
22
4
Null Pointer Dereference
17
5
Divide by Zero
10
Most Affected Products
1. Debian Debian Linux180
2. Canonical Ubuntu Linux169
3. Artifex Ghostscript112
4. debian/ghostscript99
5. Artifex Mupdf79
Recent Vulnerabilities
See more →CVE-2026-38076
CVSS 7.5high
7/9/2026
CVE-2025-71382
CVSS 7.1high
MuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Rendering
6/23/2026
https://seclists.org/oss-sec/2026/q2/652
unknown
On the issue of MIME handlers that execute arbitrary code (e.g. Wine)
5/21/2026🔧 No Patch
CVE-2026-7233
CVSS 1.9EPSS 0%low
Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-bounds
4/28/2026🔧 No Patch
CVE-2026-40505
CVSS 4.8medium
MuPDF < 1.27 mutool ANSI Injection via Metadata
4/16/2026🔧 No Patch
CVE-2026-3308
CVSS 7.8high
3/31/2026🔧 No Patch
CVE-2025-15569
CVSS 7.3high
Artifex MuPDF win_main.c get_system_dpi uncontrolled search path
2/10/2026🔧 No Patch
CVE-2026-25556
CVSS 5.9EPSS 0%medium
MuPDF 1.23.0 through 1.27.0 Barcode Decoding Double Free
2/6/2026🔧 No Patch
CVE-2025-55780
CVSS 7.5high
9/23/2025🔧 No Patch
CVE-2025-59799
CVSS 5.5medium
9/22/2025
Monitor artifex in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.