Exploited vulnerabilities

ImageMagick

3 ImageMagick vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue3
Last 12 months0
In ransomware campaigns0
Last addition9 September 2024

The vulnerabilities3

  1. 9 September 2024CVE-2016-3714ImageMagickImageMagick Improper Input Validation Vulnerability
  2. 3 November 2021CVE-2016-3718ImageMagickImageMagick Server-Side Request Forgery (SSRF) Vulnerability
  3. 3 November 2021CVE-2016-3715ImageMagickImageMagick Arbitrary File Deletion Vulnerability

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, ImageMagick included.

All vendorsThe catalogue on the CISA website