Known vulnerabilities in cups (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:cups_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 23
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cups (Ubuntu package) cups (Ubuntu package) is affected by 23 known vulnerabilities: 5 high, 8 medium, 10 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126468 - Out-of-bounds read
CVE-2026-41079
CWE-125 Low
No
No
2.4.1op1-1ubuntu4.20, 2.4.1op1-1ubuntu4.21, 2.4.7-1.2ubuntu7.13, 2.4.7-1.2ubuntu7.14, 2.4.12-0ubuntu3.9, 2.4.12-0ubuntu3.10, 2.4.16-1ubuntu1.2, 2.4.16-1ubuntu1.3 17.04.2026 SB2026041116
SB2026050301
SB2026051341
and 3 more
#VU125824 - Use After Free
CVE-2026-39316
CWE-416 Low
No
No
2.4.1op1-1ubuntu4.20, 2.4.1op1-1ubuntu4.21, 2.4.7-1.2ubuntu7.13, 2.4.7-1.2ubuntu7.14, 2.4.12-0ubuntu3.9, 2.4.12-0ubuntu3.10, 2.4.16-1ubuntu1.2, 2.4.16-1ubuntu1.3 11.04.2026 SB2026041116
SB2026041540
SB20260417108
and 13 more
#VU125822 - Integer underflow
CVE-2026-39314
CWE-191 Low
No
No
2.4.1op1-1ubuntu4.20, 2.4.1op1-1ubuntu4.21, 2.4.7-1.2ubuntu7.13, 2.4.7-1.2ubuntu7.14, 2.4.12-0ubuntu3.9, 2.4.12-0ubuntu3.10, 2.4.16-1ubuntu1.2, 2.4.16-1ubuntu1.3 11.04.2026 SB2026041116
SB20260417108
SB20260417109
and 12 more
#VU124815 - Improper input validation
CVE-2026-34978
CWE-20 Medium
No
No
2.4.1op1-1ubuntu4.20, 2.4.1op1-1ubuntu4.21, 2.4.7-1.2ubuntu7.13, 2.4.7-1.2ubuntu7.14, 2.4.12-0ubuntu3.9, 2.4.12-0ubuntu3.10, 2.4.16-1ubuntu1.2, 2.4.16-1ubuntu1.3 02.04.2026 SB2026040206
SB20260417108
SB20260417109
and 11 more
#VU124814 - Incorrect Authorization
CVE-2026-27447
CWE-863 Low
No
No
2.4.1op1-1ubuntu4.20, 2.4.1op1-1ubuntu4.21, 2.4.7-1.2ubuntu7.13, 2.4.7-1.2ubuntu7.14, 2.4.12-0ubuntu3.9, 2.4.12-0ubuntu3.10, 2.4.16-1ubuntu1.2, 2.4.16-1ubuntu1.3 02.04.2026 SB2026040206
SB20260417108
SB20260417109
and 11 more
#VU124813 - Improper input validation
CVE-2026-34980
CWE-20 High
No
No
2.1.3-4ubuntu0.11+esm13, 2.4.1op1-1ubuntu4.20, 2.4.1op1-1ubuntu4.21, 2.4.7-1.2ubuntu7.13, 2.4.7-1.2ubuntu7.14, 2.4.12-0ubuntu3.9, 2.4.12-0ubuntu3.10, 2.4.16-1ubuntu1.2, 2.4.16-1ubuntu1.3 02.04.2026 SB2026040206
SB20260417145
SB20260417146
and 11 more
#VU124812 - Heap-based Buffer Overflow
CVE-2026-34979
CWE-122 Medium
No
No
2.4.1op1-1ubuntu4.20, 2.4.1op1-1ubuntu4.21, 2.4.7-1.2ubuntu7.13, 2.4.7-1.2ubuntu7.14, 2.4.12-0ubuntu3.9, 2.4.12-0ubuntu3.10, 2.4.16-1ubuntu1.2, 2.4.16-1ubuntu1.3 02.04.2026 SB2026040206
SB20260417108
SB20260417109
and 11 more
#VU124811 - Improper input validation
CVE-2026-34990
CWE-20 Low
No
No
2.4.1op1-1ubuntu4.20, 2.4.1op1-1ubuntu4.21, 2.4.7-1.2ubuntu7.13, 2.4.7-1.2ubuntu7.14, 2.4.12-0ubuntu3.9, 2.4.12-0ubuntu3.10, 2.4.16-1ubuntu1.2, 2.4.16-1ubuntu1.3 02.04.2026 SB2026040206
SB2026041665
SB20260417108
and 10 more
#VU118818 - Resource exhaustion
CVE-2025-58436
CWE-400 Low
No
No
2.1.3-4ubuntu0.11+esm12, 2.2.7-1ubuntu2.10+esm10, 2.3.1-9ubuntu1.9+esm4, 2.4.1op1-1ubuntu4.16, 2.4.7-1.2ubuntu7.9, 2.4.12-0ubuntu1.6, 2.4.12-0ubuntu3.5 27.11.2025 SB2025112765
SB2025112856
SB2025120406
and 16 more
#VU118817 - Out-of-bounds write
CVE-2025-61915
CWE-787 Low
No
No
2.1.3-4ubuntu0.11+esm11, 2.2.7-1ubuntu2.10+esm9, 2.3.1-9ubuntu1.9+esm3, 2.4.1op1-1ubuntu4.15, 2.4.7-1.2ubuntu7.7, 2.4.12-0ubuntu1.4, 2.4.12-0ubuntu3.3 27.11.2025 SB2025112765
SB2025112772
SB2025112855
and 14 more
#VU115165 - NULL Pointer Dereference
CVE-2025-58364
CWE-476 Medium
No
No
2.1.3-4ubuntu0.11+esm9, 2.2.7-1ubuntu2.10+esm7, 2.3.1-9ubuntu1.9+esm1, 2.4.1op1-1ubuntu4.12, 2.4.7-1.2ubuntu7.4, 2.4.12-0ubuntu1.1 11.09.2025 SB2025091140
SB2025091147
SB2025091148
and 18 more
#VU115164 - Improper Authentication
CVE-2025-58060
CWE-287 High
No
No
2.1.3-4ubuntu0.11+esm9, 2.2.7-1ubuntu2.10+esm7, 2.3.1-9ubuntu1.9+esm1, 2.4.1op1-1ubuntu4.12, 2.4.7-1.2ubuntu7.4, 2.4.12-0ubuntu1.1 11.09.2025 SB2025091139
SB2025091141
SB2025091147
and 28 more
#VU97745 - Improper input validation
CVE-2024-47175
CWE-20 High
Available
No
Ubuntu Pro, 2.3.1-9ubuntu1.9, 2.4.1op1-1ubuntu4.11, 2.4.7-1.2ubuntu7.3 27.09.2024 SB2024092719
SB2024092722
SB2024092723
and 50 more
#VU92075 - UNIX Symbolic Link (Symlink) Following
CVE-2024-35235
CWE-61 Low
Available
No
Ubuntu Pro, 2.3.1-9ubuntu1.7, 2.4.1op1-1ubuntu4.9, 2.4.6-0ubuntu3.1, 2.4.7-1.2ubuntu7.1 13.06.2024 SB2024061389
SB2024061398
SB2024061399
and 29 more
#VU80932 - Off-by-one Error
CVE-2023-4504
CWE-193 High
No
No
Ubuntu Pro, 2.3.1-9ubuntu1.6, 2.4.1op1-1ubuntu4.7, 2.4.2-3ubuntu2.5 20.09.2023 SB2023092051
SB2023092052
SB2023092054
and 26 more
#VU77641 - Use After Free
CVE-2023-34241
CWE-416 Medium
No
No
Ubuntu Pro, 2.3.1-9ubuntu1.4, 2.4.1op1-1ubuntu4.4, 2.4.2-1ubuntu2.2, 2.4.2-3ubuntu2.2 22.06.2023 SB2023062261
SB2023062272
SB2023062276
and 36 more
#VU76761 - Heap-based Buffer Overflow
CVE-2023-32324
CWE-122 Medium
No
No
Ubuntu Pro, 2.2.7-1ubuntu2.10, 2.3.1-9ubuntu1.3, 2.4.1op1-1ubuntu4.2, 2.4.2-1ubuntu2.1, 2.4.2-3ubuntu2.1 01.06.2023 SB2023060132
SB2023060133
SB2023060136
and 33 more
#VU76308 - Improper Authentication
CVE-2023-32360
CWE-287 Medium
No
No
Ubuntu Pro, 2.3.1-9ubuntu1.5, 2.4.1op1-1ubuntu4.6, 2.4.2-3ubuntu2.4 18.05.2023 SB2023051860
SB2023051901
SB2023051902
and 36 more
#VU63747 - Improper Authorization
CVE-2022-26691
CWE-285 High
No
No
2.1.34ubuntu0.11+esm1, 2.2.7-1ubuntu2.9, 2.3.1-9ubuntu1.2, 2.3.3op2-7ubuntu2.1, 2.4.1op1-1ubuntu4.1 26.05.2022 SB2022052625
SB2022052626
SB2022053018
and 30 more
#VU50402 - Out-of-bounds read
CVE-2020-10001
CWE-125 Medium
No
No
2.1.34ubuntu0.11+esm1, 2.2.7-1ubuntu2.9, 2.3.1-9ubuntu1.2, 2.3.3op2-7ubuntu2.1, 2.4.1op1-1ubuntu4.1 07.02.2021 SB2021020702
SB2021020703
SB2020121515
and 10 more


Showing elements 1 - 20 out of 23