Hashcat vulnerabilities
We track 4 vulnerabilities in Hashcat products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 22, 2026.
Latest Hashcat vulnerabilities
- 7.8 High severity
hashcat: Improper Neutralization of Argument Delimiters in a Command
hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content
- 9.8 Critical severity
Hashcat: Out-of-bounds Write
A heap-based buffer overflow in hex_to_binary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted PKZIP hash file. The issue affects modules 17200, 17210, 17220, 17225, and
- 9.8 Critical severity
Hashcat: Out-of-bounds Write
A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted Kerberos hash file. The issue affects module_hash_decode in multiple Kerberos-related mo
- 9.8 Critical severity
Hashcat: Out-of-bounds Write
A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted rule file, or via the -j or -k rule options used