Windows 10: Curl and Libcurl - Vulnerability

Discus and support Curl and Libcurl - Vulnerability in Windows 10 Gaming to solve the problem; Good afternoon! We have reported 3 vulnerabilities in our environment related to the Curl and libcurl versions. Most machines have version 8.10.1.0 in... Discussion in 'Windows 10 Gaming' started by Bruno Murari, Apr 23, 2025 at 1:42 PM.

  1. BRUNO MURARI
    Bruno Murari Win User

    Curl and Libcurl - Vulnerability


    Good afternoon! We have reported 3 vulnerabilities in our environment related to the Curl and libcurl versions. Most machines have version 8.10.1.0 in the files located in the paths %windir%\System32\ and %windir%\SysWOW64\. To resolve the vulnerability, it is necessary to update the version to 8.12.0, but the latest update for Windows 10 and Windows 11 is updating to version 8.11.1. Is there a forecast for the release of an update for version 8.12? Below are the CVEs: CVE-2025-0725 - Successful exploitation of this vulnerability may cause Integer Overflow to Buffer Overflow. - https://cu

    :)
     
    Bruno Murari, Apr 23, 2025 at 1:42 PM
    #1
  2. MATTHEW ROSIER
    Matthew Rosier Win User

    CVE-2023-38545 cURL vulnerability

    Hello!

    I have a lot of workstations affected by this that are being classified as vulnerable by Tenable. All of these have cURL onboard pre-installed on the machines. I see this means we have to wait for Microsoft to release an update. Can someone please provide any idea as to when that might be so we can provide a timeline to vulnerability management stakeholders for compliance?
     
    Matthew Rosier, Apr 23, 2025 at 1:45 PM
    #2
  3. W1ZZARD
    W1zzard Win User
    need cURL help

    PHP: Requirements - Manual

    did you install libcurl ? enabled it in the php config file? is php compiled with curl support?
     
    W1zzard, Apr 23, 2025 at 1:45 PM
    #3
  4. ROBERTO HIDALGO1
    Roberto Hidalgo1 Win User

    Curl and Libcurl - Vulnerability

    How to resolve the vulnerability of cURL 8.0.1 on windows server 2019

    I need solve the vulnerabilities CVE-2023-38039, CVE-2023-38545 for cURL 8.0.1

    * Changed to a question & moved from Windows 11
     
    Roberto Hidalgo1, Apr 23, 2025 at 1:45 PM
    #4
Thema:

Curl and Libcurl - Vulnerability

Loading...

  1. Curl and Libcurl - Vulnerability - Similar Threads - Curl Libcurl Vulnerability

  2. Curl and Libcurl - Vulnerability

    in Windows 10 Software and Apps
    Curl and Libcurl - Vulnerability: Good afternoon! We have reported 3 vulnerabilities in our environment related to the Curl and libcurl versions. Most machines have version 8.10.1.0 in the files located in the paths %windir%\System32\ and %windir%\SysWOW64\. To resolve the vulnerability, it is necessary to...

  3. Curl update Win11 23H2

    in Windows 10 Gaming
    Curl update Win11 23H2: Hello,I am running multiple Windows 11 23H2 and the curl version is still 8.0.1.I have tried installing KB5032190 with no result. The update is not applicable to the affected systems.We use Intune to deploy security patches monthly.Any ideas, besides reinstalling the OS,...

  4. How to resolve the vulnerability of cURL 8.0.1 on windows server 2019

    in Windows 10 Gaming
    How to resolve the vulnerability of cURL 8.0.1 on windows server 2019: I need solve the vulnerabilities CVE-2023-38039, CVE-2023-38545 for cURL 8.0.1 https://answers.microsoft.com/en-us/windows/forum/all/how-to-resolve-the-vulnerability-of-curl-801-on/d0e0674c-9477-45fc-925f-cdf3ace295dd

  5. How to resolve the vulnerability of cURL 8.0.1 on windows server 2019

    in Windows 10 Software and Apps
    How to resolve the vulnerability of cURL 8.0.1 on windows server 2019: I need solve the vulnerabilities CVE-2023-38039, CVE-2023-38545 for cURL 8.0.1 https://answers.microsoft.com/en-us/windows/forum/all/how-to-resolve-the-vulnerability-of-curl-801-on/d0e0674c-9477-45fc-925f-cdf3ace295dd

  6. CVE-2023-38545 cURL vulnerability

    in Windows 10 Gaming
    CVE-2023-38545 cURL vulnerability: Hello!I have a lot of workstations affected by this that are being classified as vulnerable by Tenable. All of these have cURL onboard pre-installed on the machines. I see this means we have to wait for Microsoft to release an update. Can someone please provide any idea as to...

  7. CVE-2023-38545 cURL vulnerability

    in Windows 10 Software and Apps
    CVE-2023-38545 cURL vulnerability: Hello!I have a lot of workstations affected by this that are being classified as vulnerable by Tenable. All of these have cURL onboard pre-installed on the machines. I see this means we have to wait for Microsoft to release an update. Can someone please provide any idea as to...

  8. Update on Patch for Curl

    in Windows 10 Gaming
    Update on Patch for Curl: Can I get an update on the fix for CVE-2023-38545 https://answers.microsoft.com/en-us/windows/forum/all/update-on-patch-for-curl/cc17fd5c-cb7c-4e81-add7-edb861330136

  9. Update on Patch for Curl

    in Windows 10 Software and Apps
    Update on Patch for Curl: Can I get an update on the fix for CVE-2023-38545 https://answers.microsoft.com/en-us/windows/forum/all/update-on-patch-for-curl/cc17fd5c-cb7c-4e81-add7-edb861330136

  10. Curl Update for Win 11

    in Windows 10 Gaming
    Curl Update for Win 11: Hi, The Curl Executable in C:\Windows\System32 CURL.EXE is version 7.83.1 which is lower than 7.87.0 and is affeacted by a use-after-free vulnerability. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can and often do deny...