Product by Open Source
Gnu Libc
13 known vulnerabilities in Gnu Libc (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-4046 | iconv crash due to assertion failure with untrusted input | 7.5 | |
| High | CVE-2026-5435 | Potential buffer overflow in ns_sprintrrf TSIG handling path | 8.6 | |
| High | CVE-2026-5928 | Potential buffer under-read in ungetwc | 7.5 | |
| Medium | CVE-2026-86805 | AT_SECURE programs may load attacker-controlled code via $ORIGIN | 6.3 | |
| Medium | CVE-2025-8058 | The GNU C Library Glibc: Double Free | — | |
| Medium | CVE-2026-6238 | Buffer overread in ns_printrrf with corrupted RDATA field | 6.5 | |
| Medium | CVE-2026-18374 | The GNU C Library Glibc: Out-of-bounds Write | 4.9 | |
| Medium | CVE-2026-89092 | Stack overflow in nscd due to unbounded alloca use | 4.2 | |
| Low | CVE-2026-97399 | One-byte overread in strncasecmp on Power8 | 3.7 | |
| Critical | CVE-2026-5450 | scanf %mc off-by-one heap buffer overflow | 3.1 | |
| Low | CVE-2026-95818 | AT_SECURE program buffer overflow via $ORIGIN processing | 3.6 | |
| Low | CVE-2026-6368 | wordexp with WRDE_APPEND can return or use invalid memory | — | |
| Medium | CVE-2026-5358 | open source GNU libc: security vulnerability | 4.3 |