Skip to content

CVEs

Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.

CVEs: Python · Python
CVEVendor · productExploitationCVSSEPSSPublished
CVE-2015-5652Untrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local users to gain privileges via a Trojan horse readline.pyd file in the current work…Python · PythonUnlikely–0.6%2015-10-05
CVE-2008-5983Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0]…Python · PythonUnlikely–0.5%2009-01-28
CVE-2002-1119os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.Python · PythonUnlikely–0.5%2004-09-01
CVE-2011-4944Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local user…Python · PythonUnlikely–0.4%2012-08-27
CVE-2008-4108Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp…Python Software Foundation · PythonUnlikely–0.4%2008-09-18
CVE-2023-33595CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.Python · PythonUnlikely–0.4%2023-06-07
CVE-2014-2667Race condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when exist_ok is set to true and multiple threads are used, might allow local users to bypa…Python · PythonUnlikely–0.4%2014-11-16

Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.