6
CVEs
0
Critical
1
High
0
KEV
2
PoC
0
Unpatched C/H
83.3%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
1
MEDIUM
4
LOW
1
Monthly CVE Trend
Affected Products (30)
Ghostscript
108
Debian Linux
92
Mupdf
56
Ubuntu Linux
53
Enterprise Linux Desktop
28
Enterprise Linux Workstation
28
Enterprise Linux Server
28
Enterprise Linux Server Eus
27
Mujs
25
Enterprise Linux Server Aus
25
Fedora
23
Enterprise Linux Server Tus
22
Opensuse
12
Leap
11
Ghostscript Ghostxps
9
Gpl Ghostscript
9
Enterprise Linux
9
Openshift Container Platform
7
Jbig2Dec
6
Pulse Connect Secure
5
Gsview
3
Afpl Ghostscript
3
Ansible Tower
2
Thunderbird
1
Enterprise Linux For Ibm Z Systems
1
Firefox
1
Seamonkey
1
Codeready Linux Builder
1
Solaris
1
Enterprise Linux For Power Little Endian
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-25556 | MuPDF versions 1.23.0 through 1.27.0 are vulnerable to a double-free memory corruption flaw in the display list rendering function that can be triggered through crafted barcode input during exception handling. Applications using MuPDF's barcode decoding feature can crash or potentially experience heap corruption when processing specially crafted files. Public exploit code exists for this vulnerability, and a patch is available. | MEDIUM | 5.9 | 0.1% | 50 |
PoC
|
| CVE-2025-55780 | A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available. | HIGH | 7.5 | 0.1% | 38 |
|
| CVE-2026-7233 | Out-of-bounds read in Artifex MuPDF up to version 1.28.0 within the CFF Index Handler's fz_subset_cff_for_gids function allows local attackers with low privileges to disclose sensitive information from application memory. The vulnerability requires local access and low privilege level but can be triggered without user interaction; publicly available exploit code exists and the vulnerability remains unpatched as of the last vendor response. | LOW | 1.9 | 0.0% | 30 |
PoC
No patch
|
| CVE-2025-59800 | In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocr_line8. Rated medium severity (CVSS 4.3), this vulnerability is no authentication required, low attack complexity. | MEDIUM | 4.3 | 0.0% | 22 |
|
| CVE-2025-59799 | Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value. Rated medium severity (CVSS 4.3), this vulnerability is no authentication required, low attack complexity. | MEDIUM | 4.3 | 0.0% | 22 |
|
| CVE-2025-59798 | Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c. Rated medium severity (CVSS 4.3), this vulnerability is no authentication required, low attack complexity. | MEDIUM | 4.3 | 0.0% | – |
|