CVE-2026-18374

Vendor

Canonical

Product

glibc

CVSS

4.9

Exposure class

Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   Ubuntu notice Ubuntu 10h ago

   GNU C Library vulnerabilities

   It was discovered that the GNU C Library incorrectly handled the ccs= option in the fopen function. An attacker could possibly use this issue to cause GNU C Library to crash or execute arbitrary code. (CVE-2026-18374) It was…

   CVE-2026-18374CVE-2026-8674CVE-2026-86805+4 more Canonical
2. 8
   CVE NVD 27 Aug 2026

   Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or…

   Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the…

   CVSS 4.9 CVE-2026-18374