ExifTool Known Exploited Vulnerabilities

Evidence-backed KEV intelligence for ExifTool products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.

Total KEVs

1

In CISA KEV

1

Beyond CISA KEV

0

Sensor Observed

0

Virtual Patch Available

0

ExifTool KEVs Added by Year

Loading...

1 ExifTool KEV added all time (primary attestation date).

Attested CVEs

CVE Confidence CISA KEV Added
CVE-2021-22204

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the...

Confirmed In CISA 17 Nov 2021

Common Vulnerability Classes (CWE)

  • CWE-94 — Improper Control of Generation of Code ('Code Injection') 1

Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology