Login Request a demo
LI
Product
libinput
by freedesktop · last CVE Jun 4, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 2Medium 1Low 0
Severity
All severities4Critical1High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add libinput to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-50292
9.8
0%
Jun 4
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution
Affected: before 1.30.4; 1.31.0 before 1.31.3
CVE-2026-35093
8.8
0%
Apr 1
Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins
Affected: before 1.30.3; 1.30.4 before 1.31.1
CVE-2022-1215
7.8
0%
Jun 2
A format string vulnerability was found in libinput
Affected: 1.10.0 before 1.18.2; 1.19.0 before 1.19.4; 1.20.0
CVE-2026-35094
5.5
0%
Apr 1
Libinput: libinput: information disclosure via dangling pointer in lua plugin handling
Affected: All versions, or not specified
Showing 4