OP
Vendor
OpenPrinting
36
CVEs
0
On KEV
8
New 30D
Products
CU8.0
cups
OpenPrinting
25 CVEs0 on KEV8 new
CU5.5
Cups-filters
Openprinting
3 CVEs0 on KEV0 new
LI8.6
Libcupsfilters
Openprinting
3 CVEs0 on KEV0 new
LI9.8
Libppd
Openprinting
2 CVEs0 on KEV0 new
CP9.8
Cpdb-libs
Openprinting
1 CVEs0 on KEV0 new
CU5.3
Cups-browsed
Openprinting
1 CVEs0 on KEV0 new
IF6.8
Ippusbxd Firmware
Openprinting
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-61702 | CU cups OpenPrinting | 5.3 | Oct 15 | OpenPrinting CUPS: root-side banner file disclosure |
| CVE-2026-55453 | CU cups OpenPrinting | 3.3 | Oct 15 | CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip |
| CVE-2026-55480 | CU cups OpenPrinting | 5.7 | Oct 15 | CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root) |
| CVE-2026-55467 | CU cups OpenPrinting | 2.5 | Oct 15 | CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix) |
| CVE-2026-107890 | CU CUPS OpenPrinting | 5.5 | Oct 9 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests |
| CVE-2026-107888 | CU CUPS OpenPrinting | 5.5 | Oct 9 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been… |
| CVE-2026-107886 | CU CUPS OpenPrinting | 6.5 | Oct 9 | OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management |
| CVE-2026-107885 | CU CUPS OpenPrinting | 5.5 | Oct 9 | OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs() |
| CVE-2026-41079 | CU cups OpenPrinting | 5.4 | Apr 24 | OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users |
| CVE-2026-39316 | CU cups OpenPrinting | 6.2 | Apr 7 | CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer |
| CVE-2026-39314 | CU cups OpenPrinting | 6.2 | Apr 7 | CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported` |
| CVE-2026-34980 | CU cups OpenPrinting | 7.5 | Apr 3 | OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network |
| CVE-2026-34979 | CU cups OpenPrinting | 5.3 | Apr 3 | OpenPrinting CUPS: Heap overflow in `get_options()` |
| CVE-2026-34978 | CU cups OpenPrinting | 6.5 | Apr 3 | OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache) |
| CVE-2026-34990 | CU cups OpenPrinting | 7.8 | Apr 3 | OpenPrinting CUPS: Local print admin token disclosure using temporary printers |
| CVE-2026-27447 | CU cups OpenPrinting | 6.3 | Apr 3 | OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup |
| CVE-2025-61915 | CU Cups Openprinting | 6.7 | Nov 29 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems |
| CVE-2025-58436 | CU Cups Openprinting | 5.5 | Nov 29 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems |
| CVE-2025-64524 | CU Cups-filters Openprinting | 5.5 | Nov 20 | cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos |
| CVE-2025-64503 | LI Libcupsfilters Openprinting | 3.3 | Nov 12 | cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos |
| CVE-2025-57812 | LI Libcupsfilters Openprinting | 3.7 | Nov 12 | CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used… |
| CVE-2025-58364 | CU Cups Openprinting | 6.5 | Sep 11 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems |
| CVE-2025-58060 | CU Cups Openprinting | 8.0 | Sep 11 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems |
| CVE-2024-45062 | IF Ippusbxd Firmware Openprinting | 6.8 | Aug 19 | A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34 |
| CVE-2024-47176 | CU Cups-browsed Openprinting | 5.3 | Sep 26 | CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discovering print services… |
| CVE-2024-47175 | LI Libppd Openprinting | 9.8 | Sep 26 | CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support |
| CVE-2024-47076 | LI Libcupsfilters Openprinting | 8.6 | Sep 26 | CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used… |
| CVE-2024-35235 | CU Cups Openprinting | 6.7 | Jun 11 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems |
| CVE-2023-4504 | LI Libppd Openprinting | 7.0 | Sep 21 | Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code… |
| CVE-2023-34241 | CU Cups Openprinting | 7.1 | Jun 22 | OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems |
| CVE-2023-34095 | CP Cpdb-libs Openprinting | 9.8 | Jun 14 | cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends (CPDB) project |
| CVE-2023-32324 | CU Cups Openprinting | 5.5 | Jun 1 | OpenPrinting CUPS is an open source printing system |
| CVE-2022-26691 | CU Cups Openprinting | 6.7 | May 26 | A logic issue was addressed with improved state management |
