c
cups
Security Risk Profile
21
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 17 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 31, 2005 to present
17
Total CVEs
8
Critical+High
0
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
6.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
21/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
4High
4Medium
6Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
4
2
XSS
2
3
Input Validation
2
4
Null Pointer Dereference
1
5
Integer Overflow
1
Most Affected Products
1. cups CUPS17
2. Canonical Ubuntu Linux4
3. Debian Debian Linux2
4. debian/cups1
5. redhat/1.3.61
Recent Vulnerabilities
See more →CVE-2026-107655
CVSS 4.0medium
Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
Oct 9, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/165
unknown
cups: 8 various moderate vulnerabilities
Apr 17, 2026🔧 No Patch
https://seclists.org/oss-sec/2025/q4/213
unknown
CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
Nov 27, 2025🔧 No Patch
https://seclists.org/oss-sec/2024/q2/277
unknown
CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777
Jun 11, 2024🔧 No Patch
CVE-2018-6553
CVSS 8.8high
AppArmor cupsd Sandbox Bypass Due to Use of Hard Links
Aug 10, 2018
CVE-2015-1159
CVSS 4.3medium
May 14, 2015🔧 No Patch
REDHAT-BUG-1221642
CVSS 4.0medium
May 14, 2015🔧 No Patch
CVE-2015-1158
CVSS 10.0critical
May 14, 2015🔧 No Patch
CVE-2014-8166
CVSS 8.8high
Apr 4, 2014
REDHAT-BUG-558460
CVSS 7.0high
Jan 25, 2010🔧 No Patch
Monitor cups in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.