CVE-2021-36081

What this means for your business

• It affects Tesseract-Ocr Tesseract Ocr. It matters if your company, or a supplier that handles your data, runs it.
• Code showing how to exploit it has been published, but real attacks have not been confirmed.
• An attacker can use it only with access to the machine itself, without a login, but only after tricking someone into an action such as opening a file or a link.
• FIRST's prediction model gives it a 0.9% chance of attack attempts being seen in the next 30 days, ranking above 57% of all known flaws.

What to do

1. 1Check whether your company or your suppliers run Tesseract-Ocr Tesseract Ocr, and which version. The affected versions are listed further down this page.
2. 2If you do, apply the vendor's fix. A patch or vendor advisory has been published.