Approved changes feed: RSS · Atom

cpe:2.3:a:lexmark:universal_print_driver:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLexmark (380e7774-7a36-523e-93f3-2ee54971c96b)
ProductUniversal Print Driver (e8b0cda6-f4a7-539c-b770-876d0259abaa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4044 vulnerable 2026-06-08 07:29:15.310399 XML External Entity Injection vulnerability in various Lexmark Universal Drivers
HIGH (8.2)
Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.
Published: 2025-08-19T13:12:09.782Z
Updated: 2026-02-26T17:48:29.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35449 vulnerable 2026-06-08 05:32:48.715532 Details available
The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing during the add printer process, resulting in escalation of privileges to SYSTEM.
Published: 2021-07-19T14:16:42.000Z
Updated: 2024-08-04T00:40:46.264Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.