CVE-2026-84243

Vendor

The GNU C Library

Product

glibc

CVSS v3.1

7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-22

Exposure class

Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   Ubuntu notice Ubuntu 11h ago

   GNU C Library vulnerabilities

   It was discovered that the GNU C Library incorrectly handled the ccs= option in the fopen function. An attacker could possibly use this issue to cause GNU C Library to crash or execute arbitrary code. (CVE-2026-18374) It was…

   CVE-2026-18374CVE-2026-8674CVE-2026-86805+4 more Canonical
2. 15
   CVE NVD 13d ago

   The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are…

   The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid (AT_SECURE). An attacker…

   CVSS 7.0 CVE-2026-84243 The GNU C Library