CVE-2022-26691
A logic issue was addressed with improved state management. This issue is fixed in Security...
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
6.7
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
- Record
CVE-2022-26691- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-697
- Updated
- 2026-11-02
CVE List No score
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
- Record
CVE-2022-26691- Updated
- 2026-11-02
EUVDEUVD-2022-31241 No score
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
- Record
EUVD-2022-31241- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h495-hfpg-xw55
6.7
A logic issue was addressed with improved state management. This issue is fixed in Security...
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
- Record
GHSA-h495-hfpg-xw55- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-269
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-26691
6.7
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
- Record
ALPINE-CVE-2022-26691- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVAZL-37072
6.7
CVE-2022-26691 affecting package cups for versions less than 2.3.3op2-8
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
- Record
AZL-37072- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 19 moreShow less
OSVBELL-CVE-2022-26691
6.7
CVE-2022-26691 does not affect BellSoft software
- Record
BELL-CVE-2022-26691- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
6.7
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
- Record
CVE-2022-26691- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-26691
6.7
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
- Record
DEBIAN-CVE-2022-26691- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVOESA-2022-1708
6.7
cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.
Security Fix(es):
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.(CVE-2022-26691)
- Record
OESA-2022-1708- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:4990
6.7
Red Hat Security Advisory: cups security update
- Record
RHSA-2022:4990- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:5054
6.7
Red Hat Security Advisory: cups security update
- Record
RHSA-2022:5054- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:5055
6.7
Red Hat Security Advisory: cups security update
- Record
RHSA-2022:5055- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:5056
6.7
Red Hat Security Advisory: cups security and bug fix update
- Record
RHSA-2022:5056- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:5057
6.7
Red Hat Security Advisory: cups security update
- Record
RHSA-2022:5057- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2022:4990
8.1
Important: cups security update
The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.
Security Fix(es):
- cups: authorization bypass when using "local" authorization (CVE-2022-26691)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2022:4990- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVRLSA-2022:5056
8.1
Important: cups security and bug fix update
The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.
Security Fix(es):
- cups: authorization bypass when using "local" authorization (CVE-2022-26691)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- 30-second delays printing to Windows 2016 server via HTTPS (BZ#2073531)
- Record
RLSA-2022:5056- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-26691
6.7
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
- Record
UBUNTU-CVE-2022-26691- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2022-1655840189 No score
Fixed CVE-2022-26691 in cups
- CVE-2022-26691: Fix authorization bypass when using "local" authorization
- Record
CLSA-2022-1655840189- Updated
- 2026-11-02
OSVCLSA-2022-1655840327 No score
Fixed CVE-2022-26691 in cups
- CVE-2022-26691: Fix authorization bypass when using "local" authorization
- Record
CLSA-2022-1655840327- Updated
- 2026-11-02
OSVMGASA-2022-0392 No score
Updated cups packages fix security vulnerability
Authentication bypass and code execution vulnerability. (CVE-2022-26691)
- Record
MGASA-2022-0392- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12122-1 No score
cups-2.4.2-1.1 on GA media
These are all security issues fixed in the cups-2.4.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12122-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1861-1 No score
Security update for cups
This update for cups fixes the following issues:
- CVE-2022-26691: Fixed an authentication bypass and code execution vulnerability (bsc#1199474)
- Record
SUSE-SU-2022:1861-1- Updated
- 2026-11-02
OSVUSN-5454-1 No score
cups vulnerabilities
Joshua Mason discovered that CUPS incorrectly handled the secret key used to access the administrative web interface. A remote attacker could possibly use this issue to open a session as an administrator and execute arbitrary code. (CVE-2022-26691)
It was discovered that CUPS incorrectly handled certain memory operations when handling IPP printing. A remote attacker could possibly use this issue to cause CUPS to crash, leading to a denial of service, or obtain sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2019-8842, CVE-2020-10001)
- Record
USN-5454-1- Updated
- 2026-11-02
OSVUSN-5454-2 No score
cups vulnerabilities
USN-5454-1 fixed several vulnerabilities in CUPS. This update provides the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
Joshua Mason discovered that CUPS incorrectly handled the secret key used to access the administrative web interface. A remote attacker could possibly use this issue to open a session as an administrator and execute arbitrary code. (CVE-2022-26691)
It was discovered that CUPS incorrectly handled certain memory operations when handling IPP printing. A remote attacker could possibly use this issue to cause CUPS to crash, leading to a denial of service, or obtain sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2019-8842, CVE-2020-10001)
- Record
USN-5454-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsAlpine:v3.13 |
before 2.3.3-r2 | 2.3.3-r2 |
cupsAlpine:v3.14 |
before 2.3.3-r3 | 2.3.3-r3 |
cupsAlpine:v3.15 |
before 2.3.3-r6 | 2.3.3-r6 |
cupsAlpine:v3.16 |
before 2.4.2-r0 | 2.4.2-r0 |
cupsAlpine:v3.17 |
before 2.4.2-r0 | 2.4.2-r0 |
cupsAlpine:v3.18 |
before 2.4.2-r0 | 2.4.2-r0 |
cupsAlpine:v3.19 |
before 2.4.2-r0 | 2.4.2-r0 |
cupsAlpine:v3.20 |
before 2.4.2-r0 | 2.4.2-r0 |
cupsAlpine:v3.21 |
before 2.4.2-r0 | 2.4.2-r0 |
cupsAlpine:v3.22 |
before 2.4.2-r0 | 2.4.2-r0 |
Show 167 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cupsAlpine:v3.23 |
before 2.4.2-r0 | 2.4.2-r0 |
cupsAlpine:v3.24 |
before 2.4.2-r0 | 2.4.2-r0 |
cupsAzure Linux:2 |
before 2.3.3op2-8 | 2.3.3op2-8 |
cupsTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cups-clientTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cups-develTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cups-filesystemTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cups-ipptoolTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cups-libsTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cups-lpdTuxCare:CentOS:8.4 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cupsTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cups-clientTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cups-develTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cups-filesystemTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cups-ipptoolTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cups-libsTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cups-lpdTuxCare:CentOS:8.5 |
before 1:2.2.6-40.el8.tuxcare.els1 | 1:2.2.6-40.el8.tuxcare.els1 |
cupsDebian:12 |
before 2.4.2-1 | 2.4.2-1 |
cupsDebian:13 |
before 2.4.2-1 | 2.4.2-1 |
cupsDebian:14 |
before 2.4.2-1 | 2.4.2-1 |
cupsDebian:9 |
before 2.2.1-8+deb9u8, plus listed versions 2.2.1-82.2.1-8+deb9u12.2.1-8+deb9u1~bpo8+12.2.1-8+deb9u22.2.1-8+deb9u3 Show 4 moreShow less2.2.1-8+deb9u42.2.1-8+deb9u52.2.1-8+deb9u62.2.1-8+deb9u7 |
2.2.1-8+deb9u8 |
cupsDebian:10 |
before 2.2.10-6+deb10u6, plus listed versions 2.2.10-62.2.10-6+deb10u12.2.10-6+deb10u22.2.10-6+deb10u32.2.10-6+deb10u42.2.10-6+deb10u5 |
2.2.10-6+deb10u6 |
cupsDebian:11 |
before 2.3.3op2-3+deb11u2, plus listed versions 2.3.3op2-3+deb11u1 |
2.3.3op2-3+deb11u2 |
cupsMageia:8 |
before 2.3.3op2-1.1.mga8 | 2.3.3op2-1.1.mga8 |
cupsopenEuler:20.03-LTS-SP1 |
before 2.2.13-10.oe1 | 2.2.13-10.oe1 |
cupsopenEuler:20.03-LTS-SP3 |
before 2.2.13-12.oe1 | 2.2.13-12.oe1 |
cupsopenEuler:22.03-LTS |
before 2.4.0-3.oe2203 | 2.4.0-3.oe2203 |
cupsRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-clientRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-client-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-debugsourceRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-develRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-filesystemRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-ipptoolRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-ipptool-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-libs-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-lpdRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-lpd-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-printerappRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-printerapp-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cupsRed Hat:enterprise_linux:9::baseos |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-client-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-debugsourceRed Hat:enterprise_linux:9::baseos |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-ipptool-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-libsRed Hat:enterprise_linux:9::baseos |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-libs-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-lpd-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cups-printerapp-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cupsRed Hat:rhel_e4s:8.1::appstream |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-clientRed Hat:rhel_e4s:8.1::appstream |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-client-debuginfoRed Hat:rhel_e4s:8.1::appstream |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-debuginfoRed Hat:rhel_e4s:8.1::appstream |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-debugsourceRed Hat:rhel_e4s:8.1::appstream |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-develRed Hat:rhel_e4s:8.1::appstream |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-filesystemRed Hat:rhel_e4s:8.1::appstream |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-ipptoolRed Hat:rhel_e4s:8.1::appstream |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-ipptool-debuginfoRed Hat:rhel_e4s:8.1::appstream |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-libs-debuginfoRed Hat:rhel_e4s:8.1::appstream |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-lpdRed Hat:rhel_e4s:8.1::appstream |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-lpd-debuginfoRed Hat:rhel_e4s:8.1::appstream |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cupsRed Hat:rhel_e4s:8.1::baseos |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-client-debuginfoRed Hat:rhel_e4s:8.1::baseos |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-debuginfoRed Hat:rhel_e4s:8.1::baseos |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-debugsourceRed Hat:rhel_e4s:8.1::baseos |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-ipptool-debuginfoRed Hat:rhel_e4s:8.1::baseos |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-libsRed Hat:rhel_e4s:8.1::baseos |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-libs-debuginfoRed Hat:rhel_e4s:8.1::baseos |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cups-lpd-debuginfoRed Hat:rhel_e4s:8.1::baseos |
before 1:2.2.6-28.el8_1.1 | 1:2.2.6-28.el8_1.1 |
cupsRed Hat:rhel_eus:8.2::appstream |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-clientRed Hat:rhel_eus:8.2::appstream |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-client-debuginfoRed Hat:rhel_eus:8.2::appstream |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-debuginfoRed Hat:rhel_eus:8.2::appstream |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-debugsourceRed Hat:rhel_eus:8.2::appstream |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-develRed Hat:rhel_eus:8.2::appstream |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-filesystemRed Hat:rhel_eus:8.2::appstream |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-ipptoolRed Hat:rhel_eus:8.2::appstream |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-ipptool-debuginfoRed Hat:rhel_eus:8.2::appstream |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-libs-debuginfoRed Hat:rhel_eus:8.2::appstream |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-lpdRed Hat:rhel_eus:8.2::appstream |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-lpd-debuginfoRed Hat:rhel_eus:8.2::appstream |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cupsRed Hat:rhel_eus:8.2::baseos |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-client-debuginfoRed Hat:rhel_eus:8.2::baseos |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-debuginfoRed Hat:rhel_eus:8.2::baseos |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-debugsourceRed Hat:rhel_eus:8.2::baseos |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-ipptool-debuginfoRed Hat:rhel_eus:8.2::baseos |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-libsRed Hat:rhel_eus:8.2::baseos |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-libs-debuginfoRed Hat:rhel_eus:8.2::baseos |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cups-lpd-debuginfoRed Hat:rhel_eus:8.2::baseos |
before 1:2.2.6-33.el8_2.1 | 1:2.2.6-33.el8_2.1 |
cupsRed Hat:enterprise_linux:8::appstream |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-clientRed Hat:enterprise_linux:8::appstream |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-client-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-debugsourceRed Hat:enterprise_linux:8::appstream |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-develRed Hat:enterprise_linux:8::appstream |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-filesystemRed Hat:enterprise_linux:8::appstream |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-ipptoolRed Hat:enterprise_linux:8::appstream |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-ipptool-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-libs-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-lpdRed Hat:enterprise_linux:8::appstream |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-lpd-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cupsRed Hat:enterprise_linux:8::baseos |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-client-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-debugsourceRed Hat:enterprise_linux:8::baseos |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-ipptool-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-libsRed Hat:enterprise_linux:8::baseos |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-libs-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cups-lpd-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cupsRed Hat:rhel_eus:8.4::appstream |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-clientRed Hat:rhel_eus:8.4::appstream |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-client-debuginfoRed Hat:rhel_eus:8.4::appstream |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-debuginfoRed Hat:rhel_eus:8.4::appstream |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-debugsourceRed Hat:rhel_eus:8.4::appstream |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-develRed Hat:rhel_eus:8.4::appstream |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-filesystemRed Hat:rhel_eus:8.4::appstream |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-ipptoolRed Hat:rhel_eus:8.4::appstream |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-ipptool-debuginfoRed Hat:rhel_eus:8.4::appstream |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-libs-debuginfoRed Hat:rhel_eus:8.4::appstream |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-lpdRed Hat:rhel_eus:8.4::appstream |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-lpd-debuginfoRed Hat:rhel_eus:8.4::appstream |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cupsRed Hat:rhel_eus:8.4::baseos |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-client-debuginfoRed Hat:rhel_eus:8.4::baseos |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-debuginfoRed Hat:rhel_eus:8.4::baseos |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-debugsourceRed Hat:rhel_eus:8.4::baseos |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-ipptool-debuginfoRed Hat:rhel_eus:8.4::baseos |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-libsRed Hat:rhel_eus:8.4::baseos |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-libs-debuginfoRed Hat:rhel_eus:8.4::baseos |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cups-lpd-debuginfoRed Hat:rhel_eus:8.4::baseos |
before 1:2.2.6-38.el8_4.1 | 1:2.2.6-38.el8_4.1 |
cupsRocky Linux:9 |
before 1:2.3.3op2-13.el9_0.1 | 1:2.3.3op2-13.el9_0.1 |
cupsRocky Linux:8 |
before 1:2.2.6-45.el8_6.2 | 1:2.2.6-45.el8_6.2 |
cupsSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise Module for Development Tools 15 SP3 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise Module for Development Tools 15 SP4 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise Server 15-LTSS |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise Server 15 SP1-BCL |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise Server 15 SP2-BCL |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 15 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Manager Proxy 4.1 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Manager Retail Branch Server 4.1 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Manager Server 4.1 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Linux Enterprise Micro 5.2 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Enterprise Storage 6 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsSUSE:Enterprise Storage 7 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsopenSUSE:Leap 15.3 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsopenSUSE:Leap 15.4 |
before 2.2.7-150000.3.32.1 | 2.2.7-150000.3.32.1 |
cupsUbuntu:Pro:16.04:LTS |
before 2.1.3-4ubuntu0.11+esm1, plus listed versions 2.1.0-4ubuntu32.1.0-52.1.0-62.1.0-6ubuntu12.1.0-7 Show 16 moreShow less2.1.2-12.1.2-22.1.3-12.1.3-1build12.1.3-32.1.3-42.1.3-4ubuntu0.22.1.3-4ubuntu0.32.1.3-4ubuntu0.42.1.3-4ubuntu0.52.1.3-4ubuntu0.62.1.3-4ubuntu0.72.1.3-4ubuntu0.82.1.3-4ubuntu0.92.1.3-4ubuntu0.102.1.3-4ubuntu0.11 |
2.1.3-4ubuntu0.11+esm1 |
cupsUbuntu:18.04:LTS |
before 2.2.7-1ubuntu2.9, plus listed versions 2.2.4-7ubuntu22.2.5-22.2.6-22.2.6-32.2.6-4 Show 11 moreShow less2.2.6-52.2.7-1ubuntu12.2.7-1ubuntu22.2.7-1ubuntu2.12.2.7-1ubuntu2.22.2.7-1ubuntu2.32.2.7-1ubuntu2.42.2.7-1ubuntu2.52.2.7-1ubuntu2.62.2.7-1ubuntu2.72.2.7-1ubuntu2.8 |
2.2.7-1ubuntu2.9 |
cupsUbuntu:20.04:LTS |
before 2.3.1-9ubuntu1.2, plus listed versions 2.2.12-2ubuntu12.3.0-62.3.0-72.3.0-7ubuntu12.3.1-1ubuntu1 Show 5 moreShow less2.3.1-22.3.1-42.3.1-72.3.1-9ubuntu12.3.1-9ubuntu1.1 |
2.3.1-9ubuntu1.2 |
cupsUbuntu:22.04:LTS |
before 2.4.1op1-1ubuntu4.1, plus listed versions 2.3.3op2-7ubuntu22.4.1op1-1ubuntu12.4.1op1-1ubuntu22.4.1op1-1ubuntu32.4.1op1-1ubuntu4 |
2.4.1op1-1ubuntu4.1 |
cupsUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 2.2.7-1ubuntu2.9, plus listed versions 2.2.4-7ubuntu22.2.5-22.2.6-22.2.6-32.2.6-4 Show 11 moreShow less2.2.6-52.2.7-1ubuntu12.2.7-1ubuntu22.2.7-1ubuntu2.12.2.7-1ubuntu2.22.2.7-1ubuntu2.32.2.7-1ubuntu2.42.2.7-1ubuntu2.52.2.7-1ubuntu2.62.2.7-1ubuntu2.72.2.7-1ubuntu2.8 |
2.2.7-1ubuntu2.9 |
cupsUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 2.3.1-9ubuntu1.2, plus listed versions 2.2.12-2ubuntu12.3.0-62.3.0-72.3.0-7ubuntu12.3.1-1ubuntu1 Show 5 moreShow less2.3.1-22.3.1-42.3.1-72.3.1-9ubuntu12.3.1-9ubuntu1.1 |
2.3.1-9ubuntu1.2 |
cupsUbuntu:22.04:LTS From an advisory covering 3 CVEs |
before 2.4.1op1-1ubuntu4.1, plus listed versions 2.3.3op2-7ubuntu22.4.1op1-1ubuntu12.4.1op1-1ubuntu22.4.1op1-1ubuntu32.4.1op1-1ubuntu4 |
2.4.1op1-1ubuntu4.1 |
cupsUbuntu:Pro:16.04:LTS From an advisory covering 3 CVEs |
before 2.1.3-4ubuntu0.11+esm1, plus listed versions 2.1.0-4ubuntu32.1.0-52.1.0-62.1.0-6ubuntu12.1.0-7 Show 16 moreShow less2.1.2-12.1.2-22.1.3-12.1.3-1build12.1.3-32.1.3-42.1.3-4ubuntu0.22.1.3-4ubuntu0.32.1.3-4ubuntu0.42.1.3-4ubuntu0.52.1.3-4ubuntu0.62.1.3-4ubuntu0.72.1.3-4ubuntu0.82.1.3-4ubuntu0.92.1.3-4ubuntu0.102.1.3-4ubuntu0.11 |
2.1.3-4ubuntu0.11+esm1 |
cupsopenSUSE:Tumbleweed |
before 2.4.2-1.1 | 2.4.2-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-26691 is a medium vulnerability (CVSS 6.7) in Apple Macos, published May 26, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.60%, the 48th percentile. Fixed in cups 2.3.3-r2.
References
support.apple.com/en-us/HT213183
support.apple.com/en-us/HT213184
support.apple.com/en-us/HT213185
lists.debian.org/debian-lts-announce/2022/05/msg00039.html
debian.org/security/2022/dsa-5149
github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0026/MNDT-2022-0026.md
Show 44 moreShow less
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQ6TD7F3VRITPEHFDHZHK7MU6FEBMZ5U
github.com/OpenPrinting/cups/commit/de4f8c196106033e4c372dce3e91b9d42b0b9444
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQRIT4H75XV6M42K7ZTARWZ7YLLYQHPO
nvd.nist.gov/vuln/detail/CVE-2022-26691
lists.fedoraproject.org/archives/list/[email protected]/message/KQ6TD7F3VRITPEHFDHZHK7MU6FEBMZ5U
lists.fedoraproject.org/archives/list/[email protected]/message/YQRIT4H75XV6M42K7ZTARWZ7YLLYQHPO
github.com/advisories/GHSA-h495-hfpg-xw55
security.alpinelinux.org/vuln/CVE-2022-26691
docs.bell-sw.com/security/cves/CVE-2022-26691
errata.cloudlinux.com/centos8.4-els/CLSA-2022-1655840189.html
errata.cloudlinux.com/centos8.5-els/CLSA-2022-1655840327.html
security-tracker.debian.org/tracker/CVE-2022-26691
advisories.mageia.org/MGASA-2022-0392.html
bugs.mageia.org/show_bug.cgi?id=30480
openprinting.github.io/cups-2.4.2
lists.opensuse.org/archives/list/[email protected]/thread/7NQSHXNFEE2OGIYVYN23S2BDDQTAGLSJ
ubuntu.com/security/notices/USN-5454-1
lists.fedoraproject.org/archives/list/[email protected]/thread/KQ6TD7F3VRITPEHFDHZHK7MU6FEBMZ5U
access.redhat.com/errata/RHSA-2022:4990
lists.fedoraproject.org/archives/list/[email protected]/thread/YQRIT4H75XV6M42K7ZTARWZ7YLLYQHPO
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1708
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2084321
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4990.json
access.redhat.com/security/cve/CVE-2022-26691
cve.org/CVERecord?id=CVE-2022-26691
support.apple.com/en-in/HT213183
access.redhat.com/errata/RHSA-2022:5054
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5054.json
access.redhat.com/errata/RHSA-2022:5055
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5055.json
access.redhat.com/errata/RHSA-2022:5056
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5056.json
access.redhat.com/errata/RHSA-2022:5057
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5057.json
errata.rockylinux.org/RLSA-2022:4990
errata.rockylinux.org/RLSA-2022:5056
suse.com/support/update/announcement/2022/suse-su-20221861-1
bugzilla.suse.com/1199474
suse.com/security/cve/CVE-2022-26691
ubuntu.com/security/CVE-2022-26691
ubuntu.com/security/notices/USN-5454-2
ubuntu.com/security/CVE-2019-8842
ubuntu.com/security/CVE-2020-10001