Known vulnerabilities in GNU C Library (glibc)

Vendor: GNU
Software CPE: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
Total vulnerabilities: 149
Public exploits: 19
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GNU C Library (glibc) GNU C Library (glibc) is affected by 149 known vulnerabilities: 29 high, 78 medium, 42 low Critical High Medium Low

Vulnerabilities (149)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151513 - Reachable Assertion
CVE-2026-8674
CWE-617 Medium
No
No
2.45 21.09.2026 SB2026091570
SB2026100904
#VU150022 - Out-of-bounds write
CVE-2026-19499
CWE-787 Medium
No
No
2.45 15.09.2026 SB2026091570
SB2026091571
SB2026091572
and 1 more
#VU150023 - Out-of-bounds write
CVE-2026-19542
CWE-787 Low
No
No
2.45 15.09.2026 SB2026091570
SB2026091573
SB2026091574
and 1 more
#VU150024 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-77117
CWE-835 Medium
No
No
2.45 15.09.2026 SB2026091570
SB2026091571
SB2026091572
and 2 more
#VU150025 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-80489
CWE-835 Medium
No
No
2.45 15.09.2026 SB2026091570
SB2026091571
SB2026091572
and 2 more
#VU148984 - Reachable Assertion
CVE-2026-4046
CWE-617 Medium
No
No
- 11.09.2026 SB2026091126
SB2026091132
SB2026091133
and 13 more
#VU124259 - Out-of-bounds read
CVE-2026-4437
CWE-125 Medium
No
No
- 23.03.2026 SB2026032376
SB2026040346
SB2026040347
and 4 more
#VU124258 - Improper input validation
CVE-2026-4438
CWE-20 Low
No
No
- 23.03.2026 SB2026032376
SB2026040346
SB2026040347
and 4 more
#VU122300 - Use of Uninitialized Resource
CVE-2025-15281
CWE-908 Medium
No
No
2.43 04.02.2026 SB2026020432
SB2026020433
SB2026020439
and 19 more
#VU122299 - Integer overflow
CVE-2026-0861
CWE-190 High
No
No
2.43 04.02.2026 SB2026020432
SB2026020433
SB2026020434
and 20 more
#VU122298 - Use of Uninitialized Resource
CVE-2026-0915
CWE-908 Low
No
No
2.43 04.02.2026 SB2026020432
SB2026020433
SB2026020434
and 19 more
#VU113187 - Double Free
CVE-2025-8058
CWE-415 High
No
No
- 24.07.2025 SB2025072408
SB2025072511
SB2025072512
and 59 more
#VU110093 - Buffer overflow
CVE-2015-20109
CWE-120 Medium
No
No
2.22 31.07.2023 SB2017032217
#VU110106 - Memory corruption
CVE-2015-5277
CWE-119 Low
No
No
2.20 12.02.2023 SB2019061314
#VU110110 - Improper input validation
CVE-2013-7423
CWE-20 Medium
No
No
2.20 01.09.2021 SB2019061314
SB2016021706
SB2016060712
and 1 more
#VU110096 - Memory corruption
CVE-2014-9984
CWE-119 High
No
No
2.20 13.06.2019 SB2019061314
#VU110095 - Memory corruption
CVE-2011-5320
CWE-119 Medium
No
No
2.15 08.11.2017 SB2016112821
#VU110097 - Out-of-bounds read
CVE-2015-8984
CWE-125 Medium
No
No
2.22 22.03.2017 SB2017032217
#VU110098 - Heap-based Buffer Overflow
CVE-2015-8983
CWE-122 High
No
No
2.22 22.03.2017 SB2017032217
SB2022032145
#VU110107 - Improper input validation
CVE-2013-7424
CWE-20 Medium
No
No
2.15 28.11.2016 SB2016112821


Showing elements 1 - 20 out of 149