Freedesktop has 10 CVEs on record between 2017 and 2026. Disclosure cadence is accelerating: 6 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 6. The median CVSS is 5.9 (medium), with 1 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-189 (5) and CWE-190 (5). Most affected products: Poppler (6), polkit (2), dbus (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.9
- Publish → KEV
- —
- Last 90 days
- 6 prev 0
Products
- Poppler 6
- polkit 2
- dbus 1
- libbsd 1
Worst active — by depth score
CVE-2019-20367Critical· 9.1nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).51CVE-2026-93314Medium· 6.3A vulnerability was determined in Freedesktop Poppler 26.07.047CVE-2026-93313Medium· 6.3A vulnerability was found in Freedesktop Poppler 26.07.047CVE-2016-2568High· 7.8pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.43CVE-2026-93312Medium· 4.3A flaw has been found in Freedesktop Poppler 26.07.036
Freedesktop vulnerabilities
CVEs affecting Freedesktop, newest first. Open any entry for full detail, references, and exploit status.
10 CVEsRSS
CVE-2026-102621Low· 3.3A vulnerability was identified in Freedesktop Poppler up to 26.08.0
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a l…
CVE-2026-102620Low· 3.3A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0
A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed …
CVE-2026-93313Medium· 6.3PoCA vulnerability was found in Freedesktop Poppler 26.07.0
A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be ini…
CVE-2026-93314Medium· 6.3PoCA vulnerability was determined in Freedesktop Poppler 26.07.0
A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attac…
CVE-2026-93312Medium· 4.3PoCA flaw has been found in Freedesktop Poppler 26.07.0
A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The…
CVE-2026-93311Medium· 4.3PoC⚖ disputedA vulnerability was detected in Freedesktop Poppler 26.07.0
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSampl…
CVE-2026-4897Medium· 5.5A flaw was found in polkit
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory…
CVE-2023-34969Medium· 6.5D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon
D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivile…
CVE-2019-20367Critical· 9.1nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
CVE-2016-2568High· 7.8pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.