Forum Discussion

PalmerEldritch's avatar
PalmerEldritch
Copper Contributor
Apr 21, 2023
Solved

Updating curl.exe on Windows servers

Hi all,   We've been getting curl.exe coming up as a vulnerability in scans. Looks like this was added to Windows, but isn't really kept updated via MS update... seems like a bad practice. Anyway -...
Windows Server
  • AndrewT's avatar
    AndrewT
    Apr 24, 2023

    PalmerEldritch Daniel Stenberg the main developer behind cURL has addressed this in a blog post here - https://daniel.haxx.se/blog/2023/04/24/deleting-system32curl-exe/

     

    The TLDR is that manually modifying files inside the system folder is not supported and may cause future updates to fail. Microsoft has supposably shipped an updated cURL.exe in the April 2023 Cumulative. Update - are you still seeing a vulnerable version with the latest updates installed?

AndrewT's avatar
AndrewT
Iron Contributor
Apr 24, 2023

PalmerEldritch Daniel Stenberg the main developer behind cURL has addressed this in a blog post here - https://daniel.haxx.se/blog/2023/04/24/deleting-system32curl-exe/

 

The TLDR is that manually modifying files inside the system folder is not supported and may cause future updates to fail. Microsoft has supposably shipped an updated cURL.exe in the April 2023 Cumulative. Update - are you still seeing a vulnerable version with the latest updates installed?

mulana's avatar
mulana
Icon for Microsoft rankMicrosoft
Feb 05, 2025

Hi,

We are also seeing this vulnerability present even with the latest update of the Windows Server 2019 Datacenter (version 1809, OS build 17763.6775). Any ideas?

Thanks!

Resources