Chilkat Software provides a suite of utility and cryptographic libraries, predominantly distributed as ActiveX controls targeting Windows application developers, that sit embedded in a broad range of downstream products despite the vendor's narrow direct footprint. The vendor's vulnerability profile is characterized by a persistent signal of public exploit availability across its component libraries, with recurring weakness classes centered on input validation, code injection, and path traversal that reflect the parsing and dynamic code challenges inherent to utility libraries serving diverse integration contexts. Defenders should inventory products that embed these libraries and treat patches as prerequisites for downstream remediation; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Chilkat Software over time
Signals from CVEs in this vendor scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-5002HIGH Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create | Nov 10, 2008 | 9.3 | 64 | NO | YES |
CVE-2008-4343HIGH The Chilkat XML ChilkatUtil.CkData.1 ActiveX control (ChilkatUtil.dll) 3.0.3.0 and earlier allows remote attackers to create, overwrite, and modify arbitrary files for execution vi | Sep 30, 2008 | 9.3 | 36 | NO | YES |
CVE-2008-1647HIGH The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLa | Apr 2, 2008 | 9.3 | 36 | NO | YES |
CVE-2008-4583HIGH Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8Fi | Oct 15, 2008 | 7.5 | 30 | NO | YES |
CVE-2008-4584MEDIUM Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError me | Oct 15, 2008 | 6.8 | 28 | NO | YES |
CVE-2008-2017HIGH Directory traversal vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) i | Apr 30, 2008 | 7.5 | 26 | NO | NO |
CVE-2007-3633MEDIUM Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files | Jul 10, 2007 | 6.4 | 26 | NO | YES |
CVE-2008-2016HIGH PHP remote file inclusion vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the lang paramet | Apr 30, 2008 | 7.5 | 25 | NO | NO |
CVE-2007-4252MEDIUM Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary fi | Aug 8, 2007 | 4.3 | 21 | NO | YES |
Signals from CVEs in this vendor scope (9 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Chilkat Software.
Media articles that mention a CVE ID that affects a product developed by Chilkat Software — matched by CVE ID, not by vendor name.