CVE-2022-41704

—

CVSS 3.1

7.5 high

EPSS

2%p83

Published

Oct 25, 2022 (Oct 25, 2022)

Modified

Jun 17, 2026

Description

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16.

Vendors: apache debian
Products: batik, debian linux
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.