Freedesktop

Records159All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high50CVSS 7.0–8.9

Exploited now

Freedesktop records in CISA KEV

TI-2021-11232 Apple Multiple Products Integer Overflow Vulnerability CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Poppler 88 records CRITICAL Dbus 24 records MEDIUM Udisks 5 records LOW Xdg-utils 5 records HIGH Libinput 4 records HIGH Accountsservice 3 records LOW Gst-plugins-good 3 records LOW Dbus-glib 2 records LOW

Records

4 records in Libinput · all components

TI-2026-37034 CVE-2026-50292 · GHSA-jcq8-v68h-2c44

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys…

HIGH 76

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00313 Published 2026-06-04 Partial fix · 1.30.4, 1.31.3 CWE-93

TI-2026-27293 CVE-2026-35093 · GHSA-mr79-hxw4-8vpf

Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins

LOW 39

A flaw was found in libinput.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0018 Published 2026-04-01 Will not fix CWE-94

TI-2022-01102 CVE-2022-1215 · GHSA-q3fm-hh84-2m38

A format string vulnerability was found in libinput

LOW 34

A format string vulnerability was found in libinput

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0038 Published 2022-05-31 Partial fix CWE-134

TI-2026-27294 CVE-2026-35094 · GHSA-9pg8-4hvg-h64m

Libinput: libinput: information disclosure via dangling pointer in lua plugin handling

LOW 24

A flaw was found in libinput.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00146 Published 2026-04-01 No fix listed CWE-825

Open these records in search →

Critical	6
High	50
Medium	84
Low	19
No CVSS	0