FR
Vendor
freedesktop
159
CVEs
1
On KEV
3
New 30D
Products
PO9.8
poppler
freedesktop
95 CVEs1 on KEV3 new
DB7.8
Dbus
Freedesktop
24 CVEs0 on KEV0 new
UD7.8
Udisks
Freedesktop
5 CVEs0 on KEV0 new
XD8.8
Xdg-utils
Freedesktop
5 CVEs0 on KEV0 new
LI9.8
libinput
freedesktop
4 CVEs0 on KEV0 new
AC6.5
Accountsservice
Freedesktop
3 CVEs0 on KEV0 new
GS9.1
Gst-plugins-good
Freedesktop
3 CVEs0 on KEV0 new
DB–
Dbus-glib
Freedesktop
2 CVEs0 on KEV0 new
LI9.8
Libbsd
Freedesktop
2 CVEs0 on KEV0 new
PO–
Policykit
Freedesktop
2 CVEs0 on KEV0 new
PO7.8
Polkit
Freedesktop
2 CVEs0 on KEV0 new
CO–
Colord
Freedesktop
1 CVEs0 on KEV0 new
DB–
Dbus1.0
Freedesktop
1 CVEs0 on KEV0 new
DB–
Dbus1.1.0
Freedesktop
1 CVEs0 on KEV0 new
FD7.8
Freetype Demo Programs
Freedesktop
1 CVEs0 on KEV0 new
GS9.8
Gst-plugins-bad
Freedesktop
1 CVEs0 on KEV0 new
LI–
Libdbus
Freedesktop
1 CVEs0 on KEV0 new
LI5.5
Libice
Freedesktop
1 CVEs0 on KEV0 new
SC–
Scratchbox2
Freedesktop
1 CVEs0 on KEV0 new
SP–
Spice-gtk
Freedesktop
1 CVEs0 on KEV0 new
TG–
Telepathy Gabble
Freedesktop
1 CVEs0 on KEV0 new
VI5.5
Virglrenderer
Freedesktop
1 CVEs0 on KEV0 new
XD7.8
Xdg-user-dirs
Freedesktop
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107705 | PO poppler freedesktop | 6.5 | Oct 8 | Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash() |
| CVE-2026-102621 | PO Poppler Freedesktop | 3.3 | Sep 29 | Freedesktop Poppler SplashClip.cc clipToPath integer overflow |
| CVE-2026-102620 | PO Poppler Freedesktop | 3.3 | Sep 29 | Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow |
| CVE-2026-93314 | PO Poppler Freedesktop | 6.3 | Sep 18 | Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow |
| CVE-2026-93313 | PO Poppler Freedesktop | 6.3 | Sep 18 | Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow |
| CVE-2026-93312 | PO Poppler Freedesktop | 4.3 | Sep 18 | Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference |
| CVE-2026-93311 | PO Poppler Freedesktop | 4.3 | Sep 18 | Freedesktop Poppler SampledFunction Function.cc integer overflow |
| CVE-2026-50292 | LI libinput freedesktop | 9.8 | Jun 4 | In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution |
| CVE-2026-46470 | GS Gst-plugins-good Freedesktop | 9.1 | May 14 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2 |
| CVE-2026-46469 | GS Gst-plugins-good Freedesktop | 5.5 | May 14 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2 |
| CVE-2026-35094 | LI Libinput Freedesktop | 5.5 | Apr 1 | Libinput: libinput: information disclosure via dangling pointer in lua plugin handling |
| CVE-2026-35093 | LI Libinput Freedesktop | 8.8 | Apr 1 | Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins |
| CVE-2026-4897 | PO Polkit Freedesktop | 5.5 | Mar 26 | Polkit: polkit: denial of service via unbounded input processing through standard input |
| CVE-2026-1940 | GS Gst-plugins-good Freedesktop | 7.5 | Mar 23 | Gstreamer: incomplete fix of cve-2026-1940 |
| CVE-2026-26104 | UD Udisks Freedesktop | 5.5 | Feb 25 | A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization |
| CVE-2026-26103 | UD Udisks Freedesktop | 7.1 | Feb 25 | A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks |
| CVE-2025-50420 | PO Poppler Freedesktop | 6.5 | Aug 4 | An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file |
| CVE-2025-52886 | PO Poppler Freedesktop | 5.9 | Jul 2 | Poppler is a PDF rendering library |
| CVE-2025-43903 | PO Poppler Freedesktop | 3.3 | Apr 18 | NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries |
| CVE-2025-32365 | PO Poppler Freedesktop | 7.1 | Apr 5 | Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check |
| CVE-2025-32364 | PO Poppler Freedesktop | 5.5 | Apr 5 | A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN |
| CVE-2024-56378 | PO Poppler Freedesktop | 4.3 | Dec 22 | libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc |
| CVE-2024-6239 | PO Poppler Freedesktop | 7.5 | Jun 21 | A flaw was found in the Poppler's Pdfinfo utility |
| CVE-2022-38349 | PO Poppler Freedesktop | 6.5 | Aug 22 | An issue was discovered in Poppler 22.08.0 |
| CVE-2022-37052 | PO Poppler Freedesktop | 6.5 | Aug 22 | A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject |
| CVE-2022-37051 | PO Poppler Freedesktop | 6.5 | Aug 22 | An issue was discovered in Poppler 22.07.0 |
| CVE-2022-37050 | PO Poppler Freedesktop | 6.5 | Aug 22 | In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service (application crashes with SIGABRT) by crafting a PDF file in which the xref data… |
| CVE-2020-23804 | PO Poppler Freedesktop | 7.5 | Aug 22 | Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input |
| CVE-2020-18839 | PO Poppler Freedesktop | 6.5 | Aug 22 | Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service |
| CVE-2020-36024 | PO Poppler Freedesktop | 5.5 | Aug 11 | An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1… |
| CVE-2020-36023 | PO Poppler Freedesktop | 6.5 | Aug 11 | An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function |
| CVE-2023-34872 | PO Poppler Freedesktop | 5.5 | Jul 31 | A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open |
| CVE-2023-34969 | DB Dbus Freedesktop | 6.5 | Jun 8 | D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon |
| CVE-2022-4055 | XD Xdg-utils Freedesktop | 7.4 | Nov 19 | When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included… |
| CVE-2022-42010 | DB Dbus Freedesktop | 6.5 | Oct 9 | An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2 |
| CVE-2022-42012 | DB Dbus Freedesktop | 6.5 | Oct 9 | An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2 |
| CVE-2022-42011 | DB Dbus Freedesktop | 6.5 | Oct 9 | An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2 |
| CVE-2022-38784 | PO Poppler Freedesktop | 7.8 | Aug 30 | Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc) |
| CVE-2022-38171 | PO Poppler Freedesktop | 7.8 | Aug 22 | Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc) |
| CVE-2022-31782 | FD Freetype Demo Programs Freedesktop | 7.8 | Jun 2 | ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow |
| CVE-2022-1215 | LI Libinput Freedesktop | 7.8 | Jun 2 | A format string vulnerability was found in libinput |
| CVE-2022-27337 | PO Poppler Freedesktop | 6.5 | May 5 | A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file |
| CVE-2021-30860 In wildKEV | PO Poppler Freedesktop | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow Vulnerability |
| CVE-2015-1877 | XD Xdg-utils Freedesktop | 8.8 | Jun 2 | The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to… |
| CVE-2020-27748 | XD Xdg-utils Freedesktop | 6.5 | Jun 1 | A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer |
| CVE-2020-35512 | DB Dbus Freedesktop | 7.8 | Feb 15 | A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has… |
| CVE-2021-3185 | GS Gst-plugins-bad Freedesktop | 9.8 | Jan 26 | A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory… |
| CVE-2020-35702 | PO Poppler Freedesktop | 7.8 | Dec 25 | DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document |
| CVE-2020-27778 | PO Poppler Freedesktop | 7.5 | Dec 3 | A flaw was found in Poppler in the way certain PDF files were converted into HTML |
| CVE-2020-16127 | AC Accountsservice Freedesktop | 5.5 | Nov 11 | An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled… |
| CVE-2020-16126 | AC Accountsservice Freedesktop | 3.3 | Nov 11 | An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to… |
| CVE-2020-12049 | DB Dbus Freedesktop | 5.5 | Jun 8 | An issue was discovered in dbus >= 1.3.0 before 1.12.18 |
| CVE-2012-2142 | PO Poppler Freedesktop | 7.8 | Jan 9 | The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator |
| CVE-2019-20367 | LI Libbsd Freedesktop | 9.1 | Jan 8 | nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab) |
| CVE-2010-4654 | PO Poppler Freedesktop | 7.8 | Nov 13 | poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack |
| CVE-2010-4653 | PO Poppler Freedesktop | 6.5 | Nov 13 | An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts |
| CVE-2018-21009 | PO Poppler Freedesktop | 8.8 | Sep 5 | Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc |
| CVE-2019-14494 | PO Poppler Freedesktop | 7.5 | Aug 1 | An issue was discovered in Poppler through 0.78.0 |
| CVE-2019-9959 | PO Poppler Freedesktop | 6.5 | Jul 22 | The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to… |
| CVE-2019-12749 | DB Dbus Freedesktop | 7.1 | Jun 11 | dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon),… |