Known vulnerabilities in cups - page 2

Vendor: OpenPrinting
Software: cups
Software CPE: cpe:2.3:a:OpenPrinting:cups:*:*:*:*:*:*:*:*
Website: https://github.com/OpenPrinting
Total vulnerabilities: 42
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cups cups is affected by 42 known vulnerabilities: 3 high, 6 medium, 33 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155774 - Heap-based Buffer Overflow
 CWE-122 Low
No
No
 2.4.21 14.10.2026 SB2026101237
#VU155773 - Stack-based buffer overflow
 CWE-121 Low
No
No
 2.4.21 14.10.2026 SB2026101237
#VU154078 - Use After Free
 CWE-416 Low
No
No
 2.4.20 12.10.2026 SB2026061742
#VU154077 - Use After Free
 CWE-416 Low
No
No
 2.4.20 12.10.2026 SB2026061742
#VU154076 - Stack-based buffer overflow
 CWE-121 Low
No
No
 2.4.21 12.10.2026 SB2026101237
#VU154075 - NULL Pointer Dereference
CVE-2026-107655		 CWE-476 Low
No
No
 2.4.21 12.10.2026 SB2026101237
#VU154074 - Resource exhaustion
CVE-2026-107885		 CWE-400 Low
No
No
 2.4.21 12.10.2026 SB2026101237
#VU154073 - Double Free
CVE-2026-107886		 CWE-415 Low
No
No
 2.4.20 12.10.2026 SB2026061742
SB2026101556
#VU154071 - Out-of-bounds read
 CWE-125 Low
No
No
 2.4.20 12.10.2026 SB2026061742
#VU154072 - Improper input validation
 CWE-20 Low
No
No
 2.4.20 12.10.2026 SB2026061742
#VU154070 - Time-of-check Time-of-use (TOCTOU) Race Condition
 CWE-367 Low
No
No
 2.4.20 12.10.2026 SB2026061742
#VU154069 - NULL Pointer Dereference
CVE-2026-107890		 CWE-476 Low
No
No
 2.4.20 12.10.2026 SB2026061742
#VU154068 - NULL Pointer Dereference
CVE-2026-107888		 CWE-476 Low
No
No
 2.4.20 12.10.2026 SB2026061742
SB2026102718
#VU154066 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
 CWE-93 Low
No
No
 2.4.20 12.10.2026 SB2026061742
#VU154067 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
 CWE-93 Low
No
No
 2.4.20 12.10.2026 SB2026061742
#VU154065 - Improper input validation
 CWE-20 Low
No
No
 2.4.20 12.10.2026 SB2026061742
#VU154064 - Argument Injection or Modification
CVE-2026-105326		 CWE-88 Low
No
No
 2.4.20 12.10.2026 SB2026061742
#VU154063 - Out-of-bounds read
CVE-2026-87875		 CWE-125 Low
No
No
 2.4.20 12.10.2026 SB2026101231
SB2026101232
SB2026101233
and 4 more
#VU154055 - Improper Handling of Case Sensitivity
CVE-2026-87876		 CWE-178 Low
No
No
 2.4.20 09.10.2026 SB2026061742
SB2026101231
SB2026101232
and 2 more
#VU137378 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-61702		 CWE-22 Medium
No
No
 2.4.20 13.07.2026 SB2026061742


Showing elements 21 - 40 out of 42