Glibc
This hub aggregates every CVE we track for Glibc, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
179
CVEs tracked
22
Critical
63
High
1
In CISA KEV
Severity distribution
MEDIUM82HIGH63CRITICAL22LOW10
Monthly trend
0
0
1
1
0
0
0
1
2
1
0
0
0
0
0
3
0
4
4
0
0
0
3
8
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Glibc.
- CVE-2026-95818AT_SECURE program buffer overflow via $ORIGIN processing3.6
- CVE-2026-86805AT_SECURE programs may load attacker-controlled code via $ORIGIN6.3
- CVE-2026-8674Assertion failure in the DNS stub resolver with a long search domain5.3
- CVE-2026-80489EUC_JISX0213 decoding may hang on crafted input5.9
- CVE-2026-77117SHIFT_JISX0213 decoding may hang on crafted input5.9
- CVE-2026-19542Stack-based out-of-bounds write in tdelete during tree rebalancing5.6
- CVE-2026-19499Buffer overflow in strfmon and strfmon_l right-justification padding7.7
- CVE-2026-89092Stack overflow in nscd due to unbounded alloca use4.2
- CVE-2026-18374Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow wh...4.9
- CVE-2026-6791Potential stack-based buffer clash during tilde expansion in wordexp
- CVE-2026-6368wordexp with WRDE_APPEND can return or use invalid memory
- CVE-2026-6238Buffer overread in ns_printrrf with corrupted RDATA field6.5
- CVE-2026-5435Potential buffer overflow in ns_sprintrrf TSIG handling path7.3
- CVE-2026-5450scanf %mc off-by-one heap buffer overflow9.8
- CVE-2026-5928Potential buffer under-read in ungetwc7.5
Product normalization is registry-driven with AI assist and human review. How it works