Approved changes feed: RSS · Atom

cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApple (c2b419d0-9f0f-51c1-88dc-2e204a98e1c7)
ProductCups (fba1c4a1-d69f-5f22-9a4d-644883af49f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cups purl2cpe 2026-06-01 10:12:26.105646
pkg:deb/ubuntu/cups purl2cpe 2026-06-01 10:12:26.105649
pkg:github/apple/cups purl2cpe 2026-06-01 10:12:26.105652
pkg:rpm/fedora/cups purl2cpe 2026-06-01 10:12:26.105654
pkg:rpm/opensuse/cups purl2cpe 2026-06-01 10:12:26.105657

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-26691 vulnerable 2026-06-08 05:41:52.820065 Details available
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
Published: 2022-05-26T17:47:59.000Z
Updated: 2024-08-03T05:11:44.807Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4300 vulnerable 2026-06-08 05:11:41.890977 Details available
The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.
Published: 2019-04-03T17:54:23.000Z
Updated: 2024-08-05T05:11:22.271Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-18248 vulnerable 2026-06-08 05:09:10.625953 Details available
The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification.
Published: 2018-03-26T17:00:00.000Z
Updated: 2024-08-05T21:13:49.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-18190 vulnerable 2026-06-08 05:09:10.542548 Details available
A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS server (neither the OS nor the web browser is responsible for ensuring that localhost.localdomain is 127.0.0.1).
Published: 2018-02-16T17:00:00.000Z
Updated: 2024-08-05T21:13:49.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9679 vulnerable 2026-06-08 05:06:12.433126 Details available
Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which triggers a buffer overflow.
Published: 2015-02-19T15:00:00.000Z
Updated: 2024-08-06T13:55:04.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5031 vulnerable 2026-06-08 05:05:46.737535 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5030 vulnerable 2026-06-08 05:05:46.733686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3537 vulnerable 2026-06-08 05:05:33.357604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2856 vulnerable 2026-06-08 05:05:30.010481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6891 vulnerable 2026-06-08 05:05:07.257551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6094 vulnerable 2026-06-08 05:02:59.398317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3170 vulnerable 2026-06-08 04:58:10.832374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2896 vulnerable 2026-06-08 04:58:09.438456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3702 vulnerable 2026-06-08 04:55:16.439625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2941 vulnerable 2026-06-08 04:55:11.685470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2432 vulnerable 2026-06-08 04:55:07.568501 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2431 vulnerable 2026-06-08 04:55:07.506433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1748 vulnerable 2026-06-08 04:54:10.165743 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0542 vulnerable 2026-06-08 04:52:03.038632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0302 vulnerable 2026-06-08 04:52:01.735481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1183 vulnerable 2026-06-08 04:51:13.425429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1182 vulnerable 2026-06-08 04:51:13.420767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1181 vulnerable 2026-06-08 04:51:13.415257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1180 vulnerable 2026-06-08 04:51:13.409970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1179 vulnerable 2026-06-08 04:51:13.404274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0949 vulnerable 2026-06-08 04:51:12.429730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0800 vulnerable 2026-06-08 04:51:11.391578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0799 vulnerable 2026-06-08 04:51:11.387328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0166 vulnerable 2026-06-08 04:51:07.977038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0164 vulnerable 2026-06-08 04:51:07.931097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0163 vulnerable 2026-06-08 04:51:07.919747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0147 vulnerable 2026-06-08 04:51:07.828902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0146 vulnerable 2026-06-08 04:51:07.791284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0032 vulnerable 2026-06-08 04:51:07.090770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5184 vulnerable 2026-06-08 04:50:50.005288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5183 vulnerable 2026-06-08 04:50:50.002239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3641 vulnerable 2026-06-08 04:50:35.802442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3640 vulnerable 2026-06-08 04:50:35.799946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3639 vulnerable 2026-06-08 04:50:35.755894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1374 vulnerable 2026-06-08 04:50:20.112252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1033 vulnerable 2026-06-08 04:50:18.604438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0053 vulnerable 2026-06-08 04:50:10.014545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4045 vulnerable 2026-06-08 04:49:55.600209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3387 vulnerable 2026-06-08 04:49:53.922254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2154 vulnerable 2026-06-08 04:48:08.741455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1372 vulnerable 2026-06-08 04:46:23.572580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.