TensorFlow — CVE history (PyPI)
TensorFlow
434 CVEs affect the TensorFlow PyPI package (highest CVSS 9.8). Latest disclosed: 2026-02-20. Full CVE history sourced from NVD.
Summary
- Package
TensorFlow(PyPI)- Total CVEs
434- Actively exploited (CISA KEV)
- 0
- Highest CVSS
9.8- Latest disclosed
- 2026-02-20
Recent CVEs (top 20)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-2492 | High | 7.8 | — | 2026-02-20 | TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. |
CVE-2025-55559 | High | 7.5 | — | 2025-09-25 | An issue was discovered TensorFlow v2.18.0. |
CVE-2025-55556 | Medium | 6.5 | — | 2025-09-25 | TensorFlow v2.18.0 was discovered to output random results when compiling Embedding, leading to unexpected behavior in the application. |
CVE-2025-0649 | High | 7.5 | — | 2025-05-06 | Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash. |
CVE-2023-33976 | High | 7.5 | — | 2024-07-30 | TensorFlow is an end-to-end open source platform for machine learning. |
CVE-2023-30767 | Medium | 5.5 | — | 2024-02-14 | Improper buffer restrictions in Intel(R) Optimization for TensorFlow before version 2.13.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2023-25661 | Medium | 6.5 | — | 2023-03-27 | TensorFlow is an Open Source Machine Learning Framework. |
CVE-2023-27579 | High | 7.5 | — | 2023-03-25 | TensorFlow is an end-to-end open source platform for machine learning. |
CVE-2023-25801 | High | 8.0 | — | 2023-03-25 | TensorFlow is an open source machine learning platform. |
CVE-2023-25676 | High | 7.5 | — | 2023-03-25 | TensorFlow is an open source machine learning platform. |
CVE-2023-25675 | High | 7.5 | — | 2023-03-25 | TensorFlow is an open source machine learning platform. |
CVE-2023-25674 | High | 7.5 | — | 2023-03-25 | TensorFlow is an open source machine learning platform. |
CVE-2023-25673 | High | 7.5 | — | 2023-03-25 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25672 | High | 7.5 | — | 2023-03-25 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25671 | High | 7.5 | — | 2023-03-25 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25670 | High | 7.5 | — | 2023-03-25 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25669 | High | 7.5 | — | 2023-03-25 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25668 | Critical | 9.8 | — | 2023-03-25 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25667 | Medium | 6.5 | — | 2023-03-25 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25666 | High | 7.5 | — | 2023-03-25 | TensorFlow is an open source platform for machine learning. |
All-time worst (top 10 by CVSS)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2023-25668 | Critical | 9.8 | — | 2023-03-25 | TensorFlow is an open source platform for machine learning. |
CVE-2018-7575 | Critical | 9.8 | — | 2019-04-24 | Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. |
CVE-2021-37678 | Critical | 9.3 | — | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. |
CVE-2021-35958 | Critical | 9.1 | — | 2021-06-30 | TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. |
CVE-2020-15206 | Critical | 9.0 | — | 2020-09-25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorFlow's `SavedModel` protocol buffer and altering the name of required keys results in segfaults and data corruption while loading the model. |
CVE-2020-15205 | Critical | 9.0 | — | 2020-09-25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` argument of `tf.raw_ops.StringNGrams` lacks validation. |
CVE-2020-15202 | Critical | 9.0 | — | 2020-09-25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in TensorFlow expects the last argument to be a function taking two `int64` (i.e., `long long`) arguments. |
CVE-2022-23594 | High | 8.8 | — | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. |
CVE-2022-23587 | High | 8.8 | — | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. |
CVE-2022-23574 | High | 8.8 | — | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. |