OP
Vendor
OpenPrinting
38
CVEs
0
On KEV
8
New 30D
Products
CU8.0
cups
OpenPrinting
26 CVEs0 on KEV8 new
CU5.5
cups-filters
OpenPrinting
3 CVEs0 on KEV0 new
LI8.6
libcupsfilters
OpenPrinting
3 CVEs0 on KEV0 new
LI9.8
libppd
OpenPrinting
2 CVEs0 on KEV0 new
CP9.8
Cpdb-libs
Openprinting
1 CVEs0 on KEV0 new
CU5.3
cups-browsed
OpenPrinting
1 CVEs0 on KEV0 new
IP6.8
ippusbxd
OpenPrinting
1 CVEs0 on KEV0 new
IF6.8
Ippusbxd Firmware
Openprinting
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-61702 | CU cups OpenPrinting | 5.3 | Oct 15 | OpenPrinting CUPS: root-side banner file disclosure |
| CVE-2026-55453 | CU cups OpenPrinting | 3.3 | Oct 15 | CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip |
| CVE-2026-55480 | CU cups OpenPrinting | 5.7 | Oct 15 | CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root) |
| CVE-2026-55467 | CU cups OpenPrinting | 2.5 | Oct 15 | CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix) |
| CVE-2026-107890 | CU CUPS OpenPrinting | 5.5 | Oct 9 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests |
| CVE-2026-107888 | CU CUPS OpenPrinting | 5.5 | Oct 9 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been… |
| CVE-2026-107886 | CU CUPS OpenPrinting | 6.5 | Oct 9 | OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management |
| CVE-2026-107885 | CU CUPS OpenPrinting | 5.5 | Oct 9 | OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs() |
| CVE-2026-41079 | CU cups OpenPrinting | 5.4 | Apr 24 | OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users |
| CVE-2026-39316 | CU cups OpenPrinting | 6.2 | Apr 7 | CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer |
| CVE-2026-39314 | CU cups OpenPrinting | 6.2 | Apr 7 | CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported` |
| CVE-2026-34980 | CU cups OpenPrinting | 7.5 | Apr 3 | OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network |
| CVE-2026-34979 | CU cups OpenPrinting | 5.3 | Apr 3 | OpenPrinting CUPS: Heap overflow in `get_options()` |
| CVE-2026-34978 | CU cups OpenPrinting | 6.5 | Apr 3 | OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache) |
| CVE-2026-34990 | CU cups OpenPrinting | 7.8 | Apr 3 | OpenPrinting CUPS: Local print admin token disclosure using temporary printers |
| CVE-2026-27447 | CU cups OpenPrinting | 6.3 | Apr 3 | OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup |
| CVE-2025-58436 | CU cups OpenPrinting | 5.5 | Nov 29 | OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack |
| CVE-2025-61915 | CU cups OpenPrinting | 6.7 | Nov 29 | OpenPrinting CUPS vulnerable to stack based out-of-bound write |
| CVE-2025-64524 | CU cups-filters OpenPrinting | 5.5 | Nov 20 | CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution |
| CVE-2025-64503 | CU cups-filters OpenPrinting | 3.3 | Nov 12 | [BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftoraster |
| CVE-2025-57812 | LI libcupsfilters OpenPrinting | 3.7 | Nov 12 | [BIGSLEEP-434612419] CUPS-Filters has heap-buffer-overflow write in `cfImageLut()` |
| CVE-2025-58364 | CU cups OpenPrinting | 6.5 | Sep 11 | cups: Remote DoS via null dereference |
| CVE-2025-58060 | CU cups OpenPrinting | 8.0 | Sep 11 | cups has Authentication bypass with AuthType Negotiate |
| CVE-2024-45062 | IP ippusbxd OpenPrinting | 6.8 | Aug 19 | A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34 |
| CVE-2024-47175 | LI libppd OpenPrinting | 9.8 | Sep 26 | libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer |
| CVE-2024-47076 | LI libcupsfilters OpenPrinting | 8.6 | Sep 26 | libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server |
| CVE-2024-47176 | CU cups-browsed OpenPrinting | 5.3 | Sep 26 | cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source |
| CVE-2024-35235 | CU cups OpenPrinting | 6.7 | Jun 11 | Cupsd Listen arbitrary chmod 0140777 |
| CVE-2023-4504 | LI Libppd Openprinting | 7.0 | Sep 21 | Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code… |
| CVE-2023-34241 | CU Cups Openprinting | 7.1 | Jun 22 | OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems |
| CVE-2023-34095 | CP Cpdb-libs Openprinting | 9.8 | Jun 14 | cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends (CPDB) project |
| CVE-2023-32324 | CU Cups Openprinting | 5.5 | Jun 1 | OpenPrinting CUPS is an open source printing system |
| CVE-2022-26691 | CU Cups Openprinting | 6.7 | May 26 | A logic issue was addressed with improved state management |