Known vulnerabilities in cups
Vendor:
openEuler
Software:
cups
Software CPE:
cpe:2.3:o:openeuler:cups:*:*:*:*:*:openeuler:*:*
Website:
https://www.openeuler.org/
Total vulnerabilities:
24
Public exploits:
3
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (24)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU126468 - Out-of-bounds read CVE-2026-41079 |
CWE-125 | Low | 2.4.7-14 | 17.04.2026 |
SB2026041116 SB2026050301 SB2026051341 and 5 more |
||
| #VU125824 - Use After Free CVE-2026-39316 |
CWE-416 | Low | 2.4.0-19, 2.4.7-12, 2.4.7-13, 2.4.7-14 | 11.04.2026 |
SB2026041116 SB2026041540 SB20260417108 and 13 more |
||
| #VU125822 - Integer underflow CVE-2026-39314 |
CWE-191 | Low | 2.4.0-19, 2.4.7-12, 2.4.7-13, 2.4.7-14 | 11.04.2026 |
SB2026041116 SB20260417108 SB20260417109 and 12 more |
||
| #VU124815 - Improper input validation CVE-2026-34978 |
CWE-20 | Medium | 2.4.0-19, 2.4.7-13, 2.4.7-14 | 02.04.2026 |
SB2026040206 SB20260417108 SB20260417109 and 11 more |
||
| #VU124814 - Incorrect Authorization CVE-2026-27447 |
CWE-863 | Low | 2.4.0-19, 2.4.7-13, 2.4.7-14 | 02.04.2026 |
SB2026040206 SB20260417108 SB20260417109 and 11 more |
||
| #VU124813 - Improper input validation CVE-2026-34980 |
CWE-20 | High | 2.4.0-19, 2.4.7-13, 2.4.7-14 | 02.04.2026 |
SB2026040206 SB20260417145 SB20260417146 and 11 more |
||
| #VU124812 - Heap-based Buffer Overflow CVE-2026-34979 |
CWE-122 | Medium | 2.4.0-19, 2.4.7-13, 2.4.7-14 | 02.04.2026 |
SB2026040206 SB20260417108 SB20260417109 and 12 more |
||
| #VU124811 - Improper input validation CVE-2026-34990 |
CWE-20 | Low | 2.4.0-19, 2.4.7-13, 2.4.7-14 | 02.04.2026 |
SB2026040206 SB2026041665 SB20260417108 and 10 more |
||
| #VU118818 - Resource exhaustion CVE-2025-58436 |
CWE-400 | Low | 2.2.13-23, 2.4.0-18, 2.4.7-11 | 27.11.2025 |
SB2025112765 SB2025112856 SB2025120406 and 16 more |
||
| #VU118817 - Out-of-bounds write CVE-2025-61915 |
CWE-787 | Low | 2.2.13-23, 2.4.0-18, 2.4.7-11 | 27.11.2025 |
SB2025112765 SB2025112772 SB2025112855 and 14 more |
||
| #VU115165 - NULL Pointer Dereference CVE-2025-58364 |
CWE-476 | Medium | 2.4.7-7 | 11.09.2025 |
SB2025091140 SB2025091147 SB2025091148 and 18 more |
||
| #VU115164 - Improper Authentication CVE-2025-58060 |
CWE-287 | High | 2.4.7-7 | 11.09.2025 |
SB2025091139 SB2025091141 SB2025091147 and 28 more |
||
| #VU97745 - Improper input validation CVE-2024-47175 |
CWE-20 | High | 2.4.0-13, 2.4.7-5 | 27.09.2024 |
SB2024092719 SB2024092722 SB2024092723 and 50 more |
||
| #VU97743 - Missing Authorization CVE-2024-47176 |
CWE-862 | High | 2.4.0-13, 2.4.7-5 | 27.09.2024 |
SB2024092713 SB2024092715 SB2024092716 and 43 more |
||
| #VU92075 - UNIX Symbolic Link (Symlink) Following CVE-2024-35235 |
CWE-61 | Low | 2.2.13-20 | 13.06.2024 |
SB2024061389 SB2024061398 SB2024061399 and 29 more |
||
| #VU80932 - Off-by-one Error CVE-2023-4504 |
CWE-193 | High | 2.2.13-18, 2.2.13-19, 2.4.0-10 | 20.09.2023 |
SB2023092051 SB2023092052 SB2023092054 and 26 more |
||
| #VU77641 - Use After Free CVE-2023-34241 |
CWE-416 | Medium | 2.2.13-17 | 22.06.2023 |
SB2023062261 SB2023062272 SB2023062276 and 36 more |
||
| #VU76761 - Heap-based Buffer Overflow CVE-2023-32324 |
CWE-122 | Medium | 2.2.13-14 | 01.06.2023 |
SB2023060132 SB2023060133 SB2023060136 and 33 more |
||
| #VU63747 - Improper Authorization CVE-2022-26691 |
CWE-285 | High | 2.2.13-10 | 26.05.2022 |
SB2022052625 SB2022052626 SB2022053018 and 30 more |
||
| #VU27378 - Out-of-bounds read CVE-2019-8842 |
CWE-125 | Low | 2.2.13-11 | 28.04.2020 |
SB2020042708 SB2020061073 SB2022053129 and 2 more |
Showing elements 1 - 20 out of 24