F
Vendor security profile
freedesktop
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs13
Critical1
CISA KEV0
Public exploit5
Patch rate%62
Avg. CVSS6.5
12-month vulnerability rate
0
0
0
1
1
1
0
1
0
0
6
1
CVE KEV
CVE severity distribution
13toplam CVE
Critical1 (8%)
High4 (31%)
Medium8 (62%)
Patch and exploitation view
%62
Verified patch
%0
CISA KEV
%38
Public exploit
8Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
8.3
CVE-2026-107705
Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash()
F
Patch verifiedEPSS %0
4.8
CVE-2026-102621
Freedesktop Poppler SplashClip.cc clipToPath integer overflow
F
Patch verifiedEPSS %0
4.8
CVE-2026-102620
Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow
F
Patch verifiedEPSS %0
5.3
CVE-2026-93314
Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow
F
Patch verifiedEPSS %0
5.3
CVE-2026-93313
Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow
F
Patch verifiedEPSS %0
5.3
CVE-2026-93312
Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference
F
Patch verifiedEPSS %0
5.3
CVE-2026-93311
Freedesktop Poppler SampledFunction Function.cc integer overflow
F
Patch status unknownEPSS %1
9.8
CVE-2026-50292
Vulnerability in Freedesktop Libinput
F
Patch verifiedEPSS %1
8.8
CVE-2026-35093
Code injection in Freedesktop Libinput
F
Patch status unknownEPSS %0
5.5
CVE-2026-4897
Polkit: polkit: denial of service via unbounded input processing through standard input
RH
Patch verifiedEPSS %0