little cms
Security Risk Profile
34
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 17, 2008 to present
13
Total CVEs
3
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
5.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
34/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
0High
3Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Integer Overflow
4
2
Buffer Overflow
3
3
SQL Injection
1
Most Affected Products
1. Little Cms lcms28
2. Little Cms Little CMS4
3. ubuntu/liblcms2-22
4. debian/liblcms2-22
5. fedora/lcms22
Recent Vulnerabilities
See more →CVE-2026-42798
CVSS 4.0medium
4/30/2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/294
unknown
lcms2 <= 2.18 CubeSize() integer overflow: stock Ubuntu 24.04 Poppler / evince-thumbnailer / OpenJDK crashers (diffent triggers), no CVE
4/30/2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/293
unknown
lcms2 <= 2.18 CubeSize() integer overflow: stock Ubuntu 24.04 Poppler / evince-thumbnailer / OpenJDK crashers (diffent triggers), no CVE
4/30/2026🔧 No Patch
REDHAT-BUG-2459420
CVSS 4.0medium
4/18/2026🔧 No Patch
CVE-2026-41254
CVSS 7.5high
4/18/2026
https://seclists.org/oss-sec/2026/q2/170
unknown
lcms2 <= 2.18 CubeSize() integer overflow: stock Ubuntu 24.04 Poppler / evince-thumbnailer / OpenJDK crashers (diffent triggers), no CVE
4/17/2026🔧 No Patch
CVE-2025-29069
CVSS 7.3high
4/1/2025🔧 No Patch
CVE-2025-29070
CVSS 7.5high
4/1/2025🔧 No Patch
USN-3770-1
unknown
Little CMS vulnerabilities
9/20/2018🔧 No Patch
REDHAT-BUG-1628969
CVSS 4.0medium
9/14/2018🔧 No Patch
Monitor little cms in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.