Open Source GNU libc

productDE

cpe:/a:gnu:glibc:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical7high3medium0low

updated 2026-10-27

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-4911US	high7.8OT critical	63.8% (99th)	KEV	no fix	2023-10-03	—
CVE-2015-0235US	high10.0	94.6% (100th)	Exploit	no fix	2015-01-28	—
CVE-2014-5119US	high7.5	17.0% (97th)	Exploit	no fix	2014-08-29	—
CVE-2017-16997US	high7.8	2.90% (87th)	Exploit	no fix	2017-12-18	—
CVE-2017-1000408US	high7.8	1.45% (73rd)	Exploit	no fix	2018-02-01	—
CVE-2017-1000409US	high7.0	1.21% (68th)	Exploit	no fix	2018-02-01	—
CVE-2014-9984US	critical9.8	4.48% (91st)	—	no fix	2017-06-12	—
CVE-2014-0475US	medium6.8	2.69% (86th)	—	no fix	2014-07-29	—
CVE-2021-3998US	high7.5	2.20% (82nd)	—	no fix	2022-08-24	—
CVE-2023-4527US	medium6.5	1.67% (77th)	—	no fix	2023-09-18	—
CVE-2023-4806US	medium5.9	1.61% (76th)	—	no fix	2023-09-18	—
CVE-2026-80489US	—	0.36% (29th)	—	no fix	2026-09-15	—
CVE-2026-77117US	—	0.36% (29th)	—	no fix	2026-09-15	—
CVE-2026-8674US	—	0.32% (24th)	—	no fix	2026-09-17	—
CVE-2026-19499US	—	0.30% (22nd)	—	no fix	2026-09-14	—
CVE-2026-19542US	—	0.23% (13th)	—	no fix	2026-09-14	—

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')2 CVEs
CWE-131Incorrect Calculation of Buffer Size1 CVEs
CWE-189CWE-1891 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.