GL
Product
glibc
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 12Medium 13Low 2
Watch
Add glibc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-0861 | 8.4 | Jan 14 | Integer overflow in memalign leads to heap corruption Affected: 2.30 through 2.42 |
| CVE-2024-33599 | 8.1 | May 6 | nscd: Stack-based buffer overflow in netgroup cache Affected: 2.15 before 2.40 |
| CVE-2026-19499 | 7.7 | Sep 14 | Buffer overflow in strfmon and strfmon_l right-justification padding Affected: 2.38 through 2.44 |
| CVE-2026-5928 | 7.5 | Apr 20 | Potential buffer under-read in ungetwc Affected: 2.1.1-89 through 2.43 |
| CVE-2026-4046 | 7.5 | Mar 30 | iconv crash due to assertion failure with untrusted input Affected: 2.3.3 through 2.43 |
| CVE-2026-4437 | 7.5 | Mar 20 | gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response Affected: 2.34 through 2.43 |
| CVE-2025-15281 | 7.5 | Jan 20 | wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory Affected: 2.0 through 2.42 |
| CVE-2026-0915 | 7.5 | Jan 15 | getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler Affected: 2.0 through 2.42 |
| CVE-2024-33602 | 7.4 | May 6 | nscd: netgroup cache assumes NSS callback uses in-buffer strings Affected: 2.15 before 2.40 |
| CVE-2026-5435 | 7.3 | Apr 28 | Potential buffer overflow in ns_sprintrrf TSIG handling path Affected: 2.2 |
| CVE-2024-33601 | 7.3 | May 6 | nscd: netgroup cache may terminate daemon on memory allocation failure Affected: 2.15 before 2.40 |
| CVE-2024-2961 | 7.3 | Apr 17 | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT… Affected: 2.1.93 before 2.40 |
Showing 12