Known vulnerabilities in CUPS

Vendor: Apple Inc.
Software: CUPS
Software CPE: cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*
Total vulnerabilities: 20
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CUPS CUPS is affected by 20 known vulnerabilities: 5 high, 6 medium, 9 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63747 - Improper Authorization
CVE-2022-26691
CWE-285 High
No
No
2.3.6 26.05.2022 SB2022052625
SB2022052626
SB2022053018
and 30 more
#VU50402 - Out-of-bounds read
CVE-2020-10001
CWE-125 Medium
No
No
- 07.02.2021 SB2021020702
SB2021020703
SB2020121515
and 10 more
#VU27378 - Out-of-bounds read
CVE-2019-8842
CWE-125 Low
No
No
2.3.3 28.04.2020 SB2020042708
SB2020061073
SB2022053129
and 2 more
#VU27341 - Heap-based Buffer Overflow
CVE-2020-3898
CWE-122 Medium
No
No
2.3.3 27.04.2020 SB2020042707
SB2020042708
SB2020042819
and 7 more
#VU23605 - Out-of-bounds read
CVE-2019-2228
CWE-125 Low
No
No
2.2.13, 2.3.1 13.12.2019 SB2019121313
SB2020042819
SB20200611160
#VU23042 - Stack-based buffer overflow
CVE-2019-8675
CWE-121 High
No
No
2.2.12 27.11.2019 SB2019112715
SB2019112716
SB2019081611
and 8 more
#VU23040 - Stack-based buffer overflow
CVE-2019-8696
CWE-121 High
No
No
2.2.12 27.11.2019 SB2019112715
SB2019112716
SB2019081611
and 8 more
#VU11303 - Improper input validation
CVE-2017-18248
CWE-20 Low
No
No
- 28.03.2018 SB2017101611
SB2018080804
SB2018040347
and 1 more
#VU10942 - Command injection
CVE-2017-18190
CWE-77 Low
No
No
- 12.03.2018 SB2018022016
SB2018030712
SB2018030504
and 3 more
#VU37672 - Improper input validation
CVE-2014-8166
CWE-20 Medium
No
No
- 12.01.2018 SB2018011216
#VU32417 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-1159
CWE-79 Low
No
No
2.0.3 26.06.2015 SB2015062603
SB2015061521
SB2015061105
and 4 more
#VU32416 - Security Features
CVE-2015-1158
CWE-254 High
Available
No
2.0.3 26.06.2015 SB2015062602
SB2015061520
SB2015061105
and 5 more
#VU32436 - Memory corruption
CVE-2014-9679
CWE-119 Medium
No
No
2.0.2 19.02.2015 SB2015021903
SB2015031807
SB2015070723
and 2 more
#VU33296 - Improper Link Resolution Before File Access ('Link Following')
CVE-2014-5029
CWE-59 Low
No
No
1.7.5 29.07.2014 SB2014072903
SB2014071504
#VU32504 - Improper Link Resolution Before File Access ('Link Following')
CVE-2014-3537
CWE-59 Low
No
No
1.7.4 23.07.2014 SB2014072301
SB2014082101
#VU32526 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-2856
CWE-79 Low
No
No
1.7.2 18.04.2014 SB2014041802
SB2014052804
#VU32580 - Improper Link Resolution Before File Access ('Link Following')
CVE-2013-6891
CWE-59 Low
No
No
1.7.1 26.01.2014 SB2014012601
SB2014020522
#VU43321 - Permissions, Privileges, and Access Controls
CVE-2012-5519
CWE-264 High
Available
No
- 20.11.2012 SB2012112003
SB2015061105
SB2013031513
and 1 more
#VU33331 - Heap-based Buffer Overflow
CVE-2011-3170
CWE-122 Medium
No
No
1.5 19.08.2011 SB2011081903
SB2011120203
#VU32839 - Heap-based Buffer Overflow
CVE-2011-2896
CWE-122 Medium
No
No
1.4.7 19.08.2011 SB2011081901
SB2011111006
SB2011111007