TensorFlow — CVE history (PyPI)
TensorFlow
404 CVEs affect the TensorFlow PyPI package (highest CVSS 9.8). Latest disclosed: 2026-02-20. Full CVE history sourced from NVD.
Summary
- Package
TensorFlow(PyPI)- Total CVEs
404- Actively exploited (CISA KEV)
- 0
- Highest CVSS
9.8- Latest disclosed
- 2026-02-20
Recent CVEs (top 20)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-2492 | High | 7.0 | — | 2026-02-20 | TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. |
CVE-2025-0649 | — | — | — | 2025-05-06 | Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash. |
CVE-2023-33976 | High | 7.5 | — | 2024-07-30 | TensorFlow is an end-to-end open source platform for machine learning. |
CVE-2023-30767 | Medium | 5.5 | — | 2024-02-14 | Improper buffer restrictions in Intel(R) Optimization for TensorFlow before version 2.13.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2023-25661 | Medium | 6.5 | — | 2023-03-27 | TensorFlow is an Open Source Machine Learning Framework. |
CVE-2023-25660 | High | 7.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25659 | High | 7.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25658 | High | 7.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25662 | High | 7.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25663 | High | 7.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25664 | High | 7.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25667 | Medium | 6.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25666 | High | 7.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25665 | High | 7.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25668 | Critical | 9.8 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25669 | High | 7.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25670 | High | 7.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25671 | High | 7.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25672 | High | 7.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2023-25673 | High | 7.5 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
All-time worst (top 10 by CVSS)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2023-25668 | Critical | 9.8 | — | 2023-03-24 | TensorFlow is an open source platform for machine learning. |
CVE-2021-37678 | Critical | 9.3 | — | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. |
CVE-2020-15202 | Critical | 9.0 | — | 2020-09-25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in TensorFlow expects the last argument to be a function taking two `int64` (i.e., `long long`) arguments. |
CVE-2020-15205 | Critical | 9.0 | — | 2020-09-25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` argument of `tf.raw_ops.StringNGrams` lacks validation. |
CVE-2020-15206 | Critical | 9.0 | — | 2020-09-25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorFlow's `SavedModel` protocol buffer and altering the name of required keys results in segfaults and data corruption while loading the model. |
CVE-2022-23561 | High | 8.8 | — | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. |
CVE-2022-23559 | High | 8.8 | — | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. |
CVE-2022-23560 | High | 8.8 | — | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. |
CVE-2022-23574 | High | 8.8 | — | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. |
CVE-2022-23566 | High | 8.8 | — | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. |