$ cve CVE-2014-9826 JSON

CVE-2014-9826

9.8

CRITICAL · CVSS 3.0 · EPSS 3.7% (pctl 90)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.

CVSS	9.8 (CRITICAL, v3.0)
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	3.74% — more likely to be exploited than 90% of all CVEs
Weakness	CWE-388
On CISA KEV	no
Public exploit	none known
Published	2017-03-30
Last modified	2026-06-17

Vendor	Product
imagemagick	imagemagick