tesseract-ocr vulnerabilities
Recent CVEs affecting tesseract-ocr products. 8 tracked.
tesseract-ocr has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-09-10. Highest priority: CVE-2026-88051 (score 34/100).
- CVE-2026-88051 HIGH 7.8 UPGRADE Tesseract is an open source OCR engine
- CVE-2026-88052 HIGH 7.8 UPGRADE Tesseract is an open source OCR engine
- CVE-2026-88053 HIGH 7.8 UPGRADE Tesseract is an open source OCR engine
- CVE-2026-88054 MEDIUM 5.5 UPGRADE Tesseract is an open source OCR engine
- CVE-2026-88050 MEDIUM 5.5 UPGRADE Tesseract is an open source OCR engine
- CVE-2026-88049 MEDIUM 5.5 UPGRADE Tesseract is an open source OCR engine
- CVE-2026-88048 HIGH 7.1 UPGRADE Tesseract is an open source OCR engine
- CVE-2026-88047 HIGH 7.8 UPGRADE Tesseract is an open source OCR engine
FAQ
How do I fix tesseract-ocr vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tesseract-ocr being exploited right now?
None of the tracked tesseract-ocr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tesseract-ocr CVE should I patch first?
CVE-2026-88051 currently ranks highest (34/100): Tesseract is an open source OCR engine.