Glibc
179 CVEs tracked. 1 of them are in CISA KEV.
This hub aggregates every CVE we track for Glibc, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
Glibc CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 1 |
| 2025-01 | 1 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 1 |
| 2025-06 | 2 |
| 2025-07 | 1 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 3 |
| 2026-02 | 0 |
| 2026-03 | 4 |
| 2026-04 | 4 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 3 |
| 2026-09 | 8 |
Severity
How the 179 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical22
- High63
- Medium82
- Low10
Latest CVEs
The 15 most recently published vulnerabilities affecting Glibc.
- CVE-2026-95818AT_SECURE program buffer overflow via $ORIGIN processing3.6
- CVE-2026-86805AT_SECURE programs may load attacker-controlled code via $ORIGIN6.3
- CVE-2026-8674Assertion failure in the DNS stub resolver with a long search domain5.3
- CVE-2026-80489EUC_JISX0213 decoding may hang on crafted input5.9
- CVE-2026-77117SHIFT_JISX0213 decoding may hang on crafted input5.9
- CVE-2026-19542Stack-based out-of-bounds write in tdelete during tree rebalancing5.6
- CVE-2026-19499Buffer overflow in strfmon and strfmon_l right-justification padding7.7
- CVE-2026-89092Stack overflow in nscd due to unbounded alloca use4.2
- CVE-2026-18374Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow wh...4.9
- CVE-2026-6791Potential stack-based buffer clash during tilde expansion in wordexp—
- CVE-2026-6368wordexp with WRDE_APPEND can return or use invalid memory—
- CVE-2026-6238Buffer overread in ns_printrrf with corrupted RDATA field6.5
- CVE-2026-5435Potential buffer overflow in ns_sprintrrf TSIG handling path7.3
- CVE-2026-5450scanf %mc off-by-one heap buffer overflow9.8
- CVE-2026-5928Potential buffer under-read in ungetwc7.5
Product grouping is registry-driven, with AI assist and human review. How it works