Vulnerabilities

TI-2026-74874 CVE-2026-61702

Path traversal in OpenPrinting CUPS banner handling discloses files

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00424 Published 2026-10-15 Fixed in 2.4.20 CWE-22

TI-2026-74869 CVE-2026-55453

CUPS ipp backend injection can alter queue PPD settings

LOW 15

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00195 Published 2026-10-15 Fixed in 2.4.20 CWE-74

TI-2026-74871 CVE-2026-55480

Symlink race in CUPS PPD tempfile lets lp users overwrite root files

MEDIUM 59

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.7 Local High privileges No interaction EPSS 0.00202 Published 2026-10-15 Partial fix · 2.4.20 CWE-377

TI-2026-74870 CVE-2026-55467

CUPS fax option values bypass control character sanitizer

MEDIUM 46

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1LOW 2.5 Local Low privileges No interaction EPSS 0.00182 Published 2026-10-15 Fixed in 2.4.20 CWE-150

TI-2026-69846 CVE-2026-107890

NULL pointer dereference in OpenPrinting CUPS scheduler via print jobs

MEDIUM 58

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00149 Published 2026-10-09 Partial fix · 2.4.20 CWE-476

TI-2026-69844 CVE-2026-107888

NULL pointer dereference in CUPS lets job submissions crash cupsd

LOW 24

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00133 Published 2026-10-09 Partial fix · 2.4.20 CWE-476

TI-2026-69843 CVE-2026-107886

Double free in OpenPrinting CUPS printer-class management

MEDIUM 62

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00241 Published 2026-10-09 Partial fix · 2.4.20 CWE-415

TI-2026-69842 CVE-2026-107885

OpenPrinting CUPS resource exhaustion in job submission timeout handling

MEDIUM 58

OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs().

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00147 Published 2026-10-09 Partial fix CWE-770

TI-2026-29716 CVE-2026-41079

OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.00409 Published 2026-04-24 Partial fix · 2.4.17 CWE-125

TI-2026-28306 CVE-2026-39316

CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00184 Published 2026-04-07 Partial fix CWE-416

TI-2026-28304 CVE-2026-39314

CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0016 Published 2026-04-07 Partial fix CWE-191

TI-2026-27202 CVE-2026-34980

OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network

MEDIUM 60

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 4.0MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.01652 Published 2026-04-03 Partial fix CWE-20

TI-2026-27201 CVE-2026-34979

OpenPrinting CUPS: Heap overflow in `get_options()`

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00409 Published 2026-04-03 Partial fix CWE-122

TI-2026-27200 CVE-2026-34978

Path traversal in OpenPrinting cups

HIGH 68

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00422 Published 2026-04-03 Partial fix CWE-22

TI-2026-27212 CVE-2026-34990

OpenPrinting CUPS: Local print admin token disclosure using temporary printers

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 4.0MEDIUM 5.0 Local Low privileges No interaction EPSS 0.00295 Published 2026-04-03 Partial fix CWE-287

TI-2026-21858 CVE-2026-27447

OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup

MEDIUM 61

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00295 Published 2026-04-03 Partial fix CWE-863

TI-2025-36195 CVE-2025-58436

OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack

MEDIUM 58

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00247 Published 2025-11-29 Partial fix · 2.4.15 CWE-400

TI-2025-38265 CVE-2025-61915

OpenPrinting CUPS vulnerable to stack based out-of-bound write

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00496 Published 2025-11-29 Partial fix · 2.4.15 CWE-124

TI-2025-36152 CVE-2025-58364

cups: Remote DoS via null dereference

MEDIUM 62

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0116 Published 2025-09-11 Partial fix · 2.4.13 CWE-20

TI-2025-35903 CVE-2025-58060

cups has Authentication bypass with AuthType Negotiate

HIGH 70

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1HIGH 8.0 Local No auth No interaction EPSS 0.01001 Published 2025-09-11 Partial fix · 2.4.13 CWE-287

TI-2024-23304 CVE-2024-35235

Cupsd Listen arbitrary chmod 0140777

MEDIUM 63

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.02421 Published 2024-06-11 Partial fix CWE-252

TI-2023-04157 CVE-2023-4504

OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow

HIGH 66

Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00637 Published 2023-09-21 Partial fix · 2.4.6 CWE-122

TI-2023-17077 CVE-2023-34241

CUPS vulnerable to use-after-free in cupsdAcceptClient()

HIGH 70

OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.01383 Published 2023-06-22 Partial fix · 2.4.6 CWE-416

TI-2023-15618 CVE-2023-32324

OpenPrinting CUPS vulnerable to heap buffer overflow

MEDIUM 42

OpenPrinting CUPS is an open source printing system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01461 Published 2023-06-01 Partial fix CWE-122

TI-2022-09950 CVE-2022-26691 · GHSA-h495-hfpg-xw55

Incorrect comparison in Apple macOS

LOW 31

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00595 Published 2022-05-26 Fixed in 12.3, 11.6 +1 CWE-697

Vulnerabilities

Filters