Сообщество свободного программного обеспечения CUPS

Name: Сообщество свободного программного обеспечения CUPS
Brand: Сообщество свободного программного обеспечения

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical6high14medium2low

updated 2026-10-28

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-34980US	high7.5	1.57% (75th)	Exploit	no fix	2026-04-03	≤ 2.4.16
CVE-2025-58060US	—	1.00% (63rd)	Exploit	no fix	2025-09-11	≤ 2.4.13
CVE-2023-4504US	high7.0	0.64% (50th)	Exploit	no fix	2023-09-21	≤ 2.4.7
CVE-2026-34990US	—	0.29% (21st)	Exploit	no fix	2026-04-03	≤ 2.4.16
CVE-2024-35235US	medium6.7	2.42% (84th)	—	no fix	2024-06-11	≤ 2.4.9-alt1
CVE-2017-18248US	medium5.3	2.20% (82nd)	—	no fix	2018-03-26	≤ 2.2.6
CVE-2019-8696US	high8.8	2.18% (82nd)	—	no fix	2020-10-27	≤ 2.2.12
CVE-2019-8675US	high8.8	2.12% (82nd)	—	no fix	2020-10-27	≤ 2.2.12
CVE-2019-8842US	low3.3	2.03% (81st)	—	no fix	2020-10-27	≤ 2.3.3
CVE-2018-4300US	medium5.9OT elevated	1.84% (79th)	—	no fix	2019-04-03	≤ 2.2.10
CVE-2023-32324US	medium5.5	1.46% (73rd)	—	no fix	2023-06-01	≤ 2.4.2
CVE-2023-34241US	high7.1	1.38% (72nd)	—	no fix	2023-06-22	2.2.0 → 2.4.6
CVE-2025-58364US	—	1.16% (67th)	—	no fix	2025-09-11	≤ 2.4.12
CVE-2020-10001US	medium5.5	1.04% (64th)	—	no fix	2021-04-02	≤ 2.3.3op2
CVE-2024-47850US	—	0.85% (58th)	—	no fix	2024-10-04	≤ 4.11
CVE-2022-26691US	medium6.7OT elevated	0.60% (48th)	—	no fix	2022-05-26	2.0.0 → 2.4.2
CVE-2025-57812US	low3.7	0.48% (41st)	—	no fix	2025-11-12	2 versions
CVE-2025-61915US	medium6.7	0.46% (40th)	—	no fix	2025-11-29	≤ 2.4.15
CVE-2026-41079US	medium5.4	0.41% (35th)	—	no fix	2026-04-24	≤ 2.4.17
CVE-2026-34978US	—	0.41% (35th)	—	no fix	2026-04-03	≤ 2.4.17
CVE-2026-34979US	—	0.39% (33rd)	—	no fix	2026-04-03	≤ 2.4.17
CVE-2020-3898US	high7.8	0.39% (33rd)	—	no fix	2020-10-22	2 versions
CVE-2023-32360US	medium5.5	0.33% (26th)	—	no fix	2023-06-23	≤ 2.4.3
CVE-2026-27447US	medium6.3OT elevated	0.28% (21st)	—	no fix	2026-04-03	≤ 2.4.17
CVE-2025-58436US	medium5.5	0.23% (14th)	—	no fix	2025-11-29	≤ 2.4.15
CVE-2019-2228US	medium5.5	0.20% (10th)	—	no fix	2019-12-06	≤ 2.2.10
CVE-2026-39316US	medium6.2	0.18% (7th)	—	no fix	2026-04-07	≤ 2.4.17
CVE-2026-39314US	medium6.2	0.15% (4th)	—	no fix	2026-04-07	≤ 2.4.17

showing 28 of 37

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read5 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-122Heap-based Buffer Overflow3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-287Improper Authentication3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan