PatchTheCVEzlib vulnerabilities
Recent CVEs affecting zlib products. 2 tracked.
zlib has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-02-18. Highest priority: CVE-2026-22184 (score 36/100).
- CVE-2026-22184 HIGH 7.8 UPGRADE zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under
- CVE-2026-27171 LOW 2.9 UPGRADE zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do ri
FAQ
How do I fix zlib vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zlib being exploited right now?
None of the tracked zlib CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zlib CVE should I patch first?
CVE-2026-22184 currently ranks highest (36/100): zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under .