I

Irfanview

D
RISKY
187
Total CVEs
179
Crit / High
0
Medium
96%
Unpatched
0%
Patched
7.8
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
96%
Pending
4%
✓ 0 patched ✗ 181 unpatched ⏳ 7 pending score
▸ Intelligence by Audience
PoC Available
20 / 20 shown
CISA KEV (Exploited)
0
Top EPSS (Exploitation Probability)
CVE-2025-7322 0.33% exploitation probability
CVE-2025-7321 0.33% exploitation probability
CVE-2025-7299 0.18% exploitation probability
CVE-2025-7325 0.18% exploitation probability
CVE-2025-7324 0.18% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
187
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
96%
Avg CVSS score
7.8
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
MED
Vuln Volume
POOR
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News

No recent security news found for Irfanview.

▸ Recent CVEs showing 20 of 188
CVE IDSeverityPatchEPSSDate
CVE-2025-7299 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7325 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7324 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7323 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7322 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.33% 2025-07-21
CVE-2025-7321 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.33% 2025-07-21
CVE-2025-7320 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7319 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7318 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7317 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7316 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7315 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7314 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7313 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7312 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7311 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7309 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7310 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7308 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
CVE-2025-7307 PoC 7.8 HIGH UNKNOWN / UNPATCHED 0.18% 2025-07-21
View all 188 CVEs for Irfanview →
▸Intel
HQJajce, Bosnia and Herzegovina
Founded1996
Employees1
Trust ScoreD — RISKY
Max CVSS7.8
Last Updated2026-08-03
▸Top Weaknesses
CWE-119
Buffer Overflow
77 occurrences in Irfanview CVEs (41% of total)
CWE-119 ⓘ
77
CWE-125
Out-of-Bounds Read
41 occurrences in Irfanview CVEs (22% of total)
CWE-125 ⓘ
41
CWE-787
Out-of-Bounds Write
35 occurrences in Irfanview CVEs (19% of total)
CWE-787 ⓘ
35
CWE-122
Heap-Based Buffer Overflow
9 occurrences in Irfanview CVEs (5% of total)
CWE-122 ⓘ
9
CWE-119 (Memory Corruption)
Unknown Weakness Type
7 occurrences in Irfanview CVEs (4% of total)
CWE-119 (Memory Corruption) ⓘ
7
CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Unknown Weakness Type
5 occurrences in Irfanview CVEs (3% of total)
CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) ⓘ
5
CWE-416
Use After Free
4 occurrences in Irfanview CVEs (2% of total)
CWE-416 ⓘ
4
CWE-476
NULL Pointer Dereference
2 occurrences in Irfanview CVEs (1% of total)
CWE-476 ⓘ
2
▸Company Profile

IrfanView is a freeware image viewer, editor, and converter for Microsoft Windows, developed by Irfan Škiljan. It is widely used for its lightweight design, broad format support, and batch processing capabilities, but its popularity has made it a target for vulnerabilities, with 184 CVEs tracked as of 2025. Cybersecurity relevance stems from its extensive use in enterprise and personal environments, where unpatched flaws could lead to remote code execution or denial of service.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ → stable (-5%)
CVE count 2025 vs 2024:  96 → 91 CVEs
Patch Speed ⓘ Poor (>65% open)
96% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€600K
Est. GDPR High
€6.0M

Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Irfanview D valtersit.com