TG
Vendor security profile
The GNU C Library
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical0
CISA KEV0
Public exploit0
Patch rate%18
Avg. CVSS5.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
9
0
CVE KEV
CVE severity distribution
11toplam CVE
High1 (9%)
Medium8 (73%)
Low2 (18%)
Patch and exploitation view
%18
Verified patch
%0
CISA KEV
%0
Public exploit
1Patch available
1Partial
0Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
3.7
CVE-2026-97399
One-byte overread in strncasecmp on Power8
TG
Patch status unknownEPSS %0
3.6
CVE-2026-95818
AT_SECURE program buffer overflow via $ORIGIN processing
TG
Patch status unknownEPSS %0
6.3
CVE-2026-86805
AT_SECURE programs may load attacker-controlled code via $ORIGIN
TG
Patch status unknownEPSS %0
5.3
CVE-2026-8674
Assertion failure in the DNS stub resolver with a long search domain
TG
Patch verifiedEPSS %0
5.9
CVE-2026-80489
EUC_JISX0213 decoding may hang on crafted input
TG
Patch status unknownEPSS %0
5.9
CVE-2026-77117
SHIFT_JISX0213 decoding may hang on crafted input
TG
Patch status unknownEPSS %0
5.6
CVE-2026-19542
Stack-based out-of-bounds write in tdelete during tree rebalancing
TG
Patch status unknownEPSS %0
7.7
CVE-2026-19499
Buffer overflow in strfmon and strfmon_l right-justification padding
TG
Patch status unknownEPSS %0
4.2
CVE-2026-89092
Stack overflow in nscd due to unbounded alloca use
TG
Patch status unknownEPSS %0
4.9
CVE-2026-18374
Out-of-bounds write in The GNU C Library Glibc
TG
Patch status unknownEPSS %0