Product by OpenPrinting
OpenPrinting CUPS
26 known vulnerabilities in OpenPrinting CUPS (OpenPrinting), 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-47175 | libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer | 8.6 | |
| High | CVE-2026-34980 | OpenPrinting CUPS: Improper Input Validation | 7.5 | |
| Medium | CVE-2024-35235 | Cupsd Listen arbitrary chmod 0140777 | 4.4 | |
| High | CVE-2023-32324 | OpenPrinting CUPS vulnerable to heap buffer overflow | 7.5 | |
| High | CVE-2025-58060 | cups has Authentication bypass with AuthType Negotiate | 8.0 | |
| Medium | CVE-2025-58364 | cups: Remote DoS via null dereference | 6.5 | |
| High | CVE-2023-34241 | CUPS vulnerable to use-after-free in cupsdAcceptClient() | 5.3 | |
| High | CVE-2026-34990 | OpenPrinting CUPS: Local print admin token disclosure using temporary printers | 7.8 | |
| Medium | CVE-2026-61702 | OpenPrinting CUPS: root-side banner file disclosure | 5.3 | |
| Medium | CVE-2026-41079 | OpenPrinting CUPS: Out-of-bounds Read | 5.4 | |
| Medium | CVE-2026-55480 | OpenPrinting CUPS: Link Following | 5.7 | |
| High | CVE-2023-4504 | OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow | 7.0 | |
| Medium | CVE-2026-34978 | OpenPrinting CUPS: Path Traversal | 6.5 | |
| Medium | CVE-2025-61915 | OpenPrinting CUPS vulnerable to stack based out-of-bound write | 6.0 | |
| Medium | CVE-2026-107888 | OpenPrinting CUPS: NULL Pointer Dereference | 5.1 | |
| Medium | CVE-2022-26691 | Apple macOS: Privilege Escalation | 6.7 | |
| Medium | CVE-2026-34979 | OpenPrinting CUPS: Heap overflow in `get_options()` | 5.3 | |
| Medium | CVE-2026-39316 | CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer | 6.2 | |
| Low | CVE-2026-55453 | OpenPrinting CUPS: OS Command Injection | 3.3 | |
| Medium | CVE-2026-39314 | OpenPrinting CUPS: Integer Underflow (Wrap or Wraparound) | 6.2 | |
| Medium | CVE-2026-107890 | OpenPrinting CUPS: NULL Pointer Dereference | 3.3 | |
| Medium | CVE-2026-107885 | OpenPrinting CUPS: Allocation of Resources Without Limits or Throttling | 3.3 | |
| Medium | CVE-2026-27447 | OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup | 4.8 | |
| Medium | CVE-2026-107886 | OpenPrinting CUPS: Double Free | 2.3 | |
| Low | CVE-2026-55467 | CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix) | 2.5 |