OpenPrinting

Records34All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

OpenPrinting records in CISA KEV

No OpenPrinting vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cups 25 records HIGH Cups-filters 3 records MEDIUM Libcupsfilters 3 records HIGH Libppd 2 records HIGH Cpdb-libs 1 record HIGH Cups-browsed 1 record MEDIUM Ippusbxd Firmware 1 record HIGH

Records

25 records in Cups · all components

TI-2025-35903 CVE-2025-58060

cups has Authentication bypass with AuthType Negotiate

HIGH 70

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1HIGH 8.0 Local No auth No interaction EPSS 0.01001 Published 2025-09-11 Partial fix · 2.4.13 CWE-287

TI-2023-17077 CVE-2023-34241

CUPS vulnerable to use-after-free in cupsdAcceptClient()

HIGH 70

OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.01383 Published 2023-06-22 Partial fix · 2.4.6 CWE-416

TI-2026-27200 CVE-2026-34978

Path traversal in OpenPrinting cups

HIGH 68

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00422 Published 2026-04-03 Partial fix CWE-22

TI-2023-04157 CVE-2023-4504

OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow

HIGH 66

Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00637 Published 2023-09-21 Partial fix · 2.4.6 CWE-122

TI-2026-74874 CVE-2026-61702

Path traversal in OpenPrinting CUPS banner handling discloses files

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00424 Published 2026-10-15 Fixed in 2.4.20 CWE-22

TI-2026-27201 CVE-2026-34979

OpenPrinting CUPS: Heap overflow in `get_options()`

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00409 Published 2026-04-03 Partial fix CWE-122

TI-2025-38265 CVE-2025-61915

OpenPrinting CUPS vulnerable to stack based out-of-bound write

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00496 Published 2025-11-29 Partial fix · 2.4.15 CWE-124

TI-2024-23304 CVE-2024-35235

Cupsd Listen arbitrary chmod 0140777

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.02421 Published 2024-06-11 Partial fix CWE-252

TI-2026-69843 CVE-2026-107886

Double free in OpenPrinting CUPS printer-class management

MEDIUM 62

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00241 Published 2026-10-09 Partial fix · 2.4.20 CWE-415

TI-2025-36152 CVE-2025-58364

cups: Remote DoS via null dereference

MEDIUM 62

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0116 Published 2025-09-11 Partial fix · 2.4.13 CWE-20

TI-2026-28306 CVE-2026-39316

CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00184 Published 2026-04-07 Partial fix CWE-416

TI-2026-28304 CVE-2026-39314

CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0016 Published 2026-04-07 Partial fix CWE-191

TI-2026-21858 CVE-2026-27447

OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00295 Published 2026-04-03 Partial fix CWE-863

TI-2026-27202 CVE-2026-34980

OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network

MEDIUM 60

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 4.0MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.01652 Published 2026-04-03 Partial fix CWE-20

TI-2026-74871 CVE-2026-55480

Symlink race in CUPS PPD tempfile lets lp users overwrite root files

MEDIUM 59

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.7 Local High privileges No interaction EPSS 0.00202 Published 2026-10-15 Partial fix · 2.4.20 CWE-377

TI-2026-69846 CVE-2026-107890

NULL pointer dereference in OpenPrinting CUPS scheduler via print jobs

MEDIUM 58

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00149 Published 2026-10-09 Partial fix · 2.4.20 CWE-476

TI-2026-69842 CVE-2026-107885

OpenPrinting CUPS resource exhaustion in job submission timeout handling

MEDIUM 58

OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs().

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00147 Published 2026-10-09 Partial fix CWE-770

TI-2026-29716 CVE-2026-41079

OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.00409 Published 2026-04-24 Partial fix · 2.4.17 CWE-125

TI-2026-27212 CVE-2026-34990

OpenPrinting CUPS: Local print admin token disclosure using temporary printers

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 4.0MEDIUM 5.0 Local Low privileges No interaction EPSS 0.00295 Published 2026-04-03 Partial fix CWE-287

TI-2025-36195 CVE-2025-58436

OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00247 Published 2025-11-29 Partial fix · 2.4.15 CWE-400

TI-2026-74870 CVE-2026-55467

CUPS fax option values bypass control character sanitizer

MEDIUM 46

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1LOW 2.5 Local Low privileges No interaction EPSS 0.00182 Published 2026-10-15 Fixed in 2.4.20 CWE-150

TI-2023-15618 CVE-2023-32324

OpenPrinting CUPS vulnerable to heap buffer overflow

MEDIUM 42

OpenPrinting CUPS is an open source printing system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01461 Published 2023-06-01 Partial fix CWE-122

TI-2022-09950 CVE-2022-26691 · GHSA-h495-hfpg-xw55

Incorrect comparison in Apple macOS

LOW 31

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00595 Published 2022-05-26 Fixed in 12.3, 11.6 +1 CWE-697

TI-2026-69844 CVE-2026-107888

NULL pointer dereference in CUPS lets job submissions crash cupsd

LOW 24

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00133 Published 2026-10-09 Partial fix · 2.4.20 CWE-476

TI-2026-74869 CVE-2026-55453

CUPS ipp backend injection can alter queue PPD settings

LOW 15

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00195 Published 2026-10-15 Fixed in 2.4.20 CWE-74

Open these records in search →