Known vulnerabilities in GNU C Library (glibc)

Vendor: GNU
Software CPE: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
Total vulnerabilities: 139
Public exploits: 19
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GNU C Library (glibc) GNU C Library (glibc) is affected by 139 known vulnerabilities: 28 high, 71 medium, 40 low Critical High Medium Low

Vulnerabilities (139)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124259 - Out-of-bounds read
CVE-2026-4437
CWE-125 Medium
No
No
- 23.03.2026 SB2026032376
SB2026040346
SB2026040347
and 4 more
#VU124258 - Improper input validation
CVE-2026-4438
CWE-20 Low
No
No
- 23.03.2026 SB2026032376
SB2026040346
SB2026040347
and 4 more
#VU122300 - Use of Uninitialized Resource
CVE-2025-15281
CWE-908 Medium
No
No
2.43 04.02.2026 SB2026020432
SB2026020433
SB2026020439
and 17 more
#VU122299 - Integer overflow
CVE-2026-0861
CWE-190 High
No
No
2.43 04.02.2026 SB2026020432
SB2026020433
SB2026020434
and 19 more
#VU122298 - Use of Uninitialized Resource
CVE-2026-0915
CWE-908 Low
No
No
2.43 04.02.2026 SB2026020432
SB2026020433
SB2026020434
and 17 more
#VU113187 - Double Free
CVE-2025-8058
CWE-415 High
No
No
- 24.07.2025 SB2025072408
SB2025072511
SB2025072512
and 59 more
#VU111873 - Resource Management Errors
CVE-2025-5745
CWE-399 Medium
No
No
- 24.06.2025 SB2025062437
SB2025062438
SB2025062439
and 1 more
#VU111872 - Resource Management Errors
CVE-2025-5702
CWE-399 Medium
No
No
- 24.06.2025 SB2025062437
SB2025062438
SB2025062439
and 11 more
#VU109844 - Untrusted Search Path
CVE-2025-4802
CWE-426 Low
No
No
2.39 27.05.2025 SB2025052725
SB2025052735
SB2025052910
and 36 more
#VU103687 - Memory corruption
CVE-2025-0395
CWE-119 Medium
No
No
2.41 06.02.2025 SB2025020664
SB2025020667
SB2025020668
and 66 more
#VU89712 - Stack-based buffer overflow
CVE-2024-33599
CWE-121 High
No
No
- 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 84 more
#VU89711 - NULL Pointer Dereference
CVE-2024-33600
CWE-476 Medium
No
No
- 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 83 more
#VU89710 - Allocation of Resources Without Limits or Throttling
CVE-2024-33601
CWE-770 Low
No
No
- 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 82 more
#VU89709 - Memory corruption
CVE-2024-33602
CWE-119 Medium
No
No
- 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU88822 - Memory corruption
CVE-2024-2961
CWE-119 High
Available
Exploited
- 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more
#VU85935 - Integer overflow
CVE-2023-6780
CWE-190 Low
No
No
- 31.01.2024 SB2024013126
SB2024013135
SB2024013136
and 6 more
#VU85934 - Off-by-one Error
CVE-2023-6779
CWE-193 Low
No
No
- 31.01.2024 SB2024013126
SB2024013135
SB2024013136
and 5 more
#VU85932 - Heap-based Buffer Overflow
CVE-2023-6246
CWE-122 Low
Available
No
- 31.01.2024 SB2024013126
SB2024013135
SB2024013136
and 5 more
#VU81453 - Use After Free
CVE-2023-4813
CWE-416 Medium
No
No
2.36 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81448 - Missing release of memory after effective lifetime
CVE-2023-5156
CWE-401 Medium
No
No
- 03.10.2023 SB2023100364
SB2023120723
SB2024011035
and 11 more


Showing elements 1 - 20 out of 139