tesseract ocr vulnerabilities and fixes

Recent CVEs affecting tesseract ocr, with upgrade or downgrade steps. 8 tracked.

Also searched as: tesseractocr.

tesseract ocr has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-09-10. Highest priority: CVE-2026-88051 (score 34/100).

• CVE-2026-88051 HIGH 7.8 UPGRADE Tesseract is an open source OCR engine
• CVE-2026-88052 HIGH 7.8 UPGRADE Tesseract is an open source OCR engine
• CVE-2026-88053 HIGH 7.8 UPGRADE Tesseract is an open source OCR engine
• CVE-2026-88054 MEDIUM 5.5 UPGRADE Tesseract is an open source OCR engine
• CVE-2026-88050 MEDIUM 5.5 UPGRADE Tesseract is an open source OCR engine
• CVE-2026-88049 MEDIUM 5.5 UPGRADE Tesseract is an open source OCR engine
• CVE-2026-88048 HIGH 7.1 UPGRADE Tesseract is an open source OCR engine
• CVE-2026-88047 HIGH 7.8 UPGRADE Tesseract is an open source OCR engine

FAQ

How do I fix tesseract ocr vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is tesseract ocr being exploited right now?

None of the tracked tesseract ocr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which tesseract ocr CVE should I patch first?

CVE-2026-88051 currently ranks highest (34/100): Tesseract is an open source OCR engine.

RSS feed for tesseract ocr · ← Back to latest CVEs