{"schema_version":1,"title":"GNU C Library vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in GNU C Library: 0 in the last 7 days and 6 in the last 90 days, 1 of them critical and 1 exploited in the wild. The most recent, CVE-2026-8674, was published on 17 September 2026.","url":"https://junglewise.ai/threats/technologies/gnu-c-library","json_url":"https://junglewise.ai/threats/technologies/gnu-c-library.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/gnu-c-library","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":1,"all_time":7,"critical":1,"exploited":1,"last_7_days":0,"last_30_days":6,"last_90_days":6,"last_365_days":6},"latest":[{"cve":"CVE-2026-8674","cvss":5.3,"epss":0.0034,"slug":"cve-2026-8674-gnu-c-library-dns-resolver-assertion-failure-in-search-list","title":"GNU C Library DNS resolver assertion failure in search list parsing","severity":"medium","exploited":false,"published_at":"2026-09-17T17:16:53.22+00:00","url":"https://junglewise.ai/threats/cve-2026-8674-gnu-c-library-dns-resolver-assertion-failure-in-search-list"},{"cve":"CVE-2026-80489","cvss":5.9,"epss":0.0041,"slug":"cve-2026-80489-gnu-c-library-euc-jisx0213-converter-denial-of-service","title":"GNU C Library EUC_JISX0213 converter denial of service","severity":"medium","exploited":false,"published_at":"2026-09-15T11:17:12.193+00:00","url":"https://junglewise.ai/threats/cve-2026-80489-gnu-c-library-euc-jisx0213-converter-denial-of-service"},{"cve":"CVE-2026-19542","cvss":5.6,"epss":0.0023,"slug":"cve-2026-19542-gnu-c-library-tdelete-stack-based-buffer-overflow","title":"GNU C Library tdelete stack-based buffer overflow","severity":"medium","exploited":false,"published_at":"2026-09-14T18:17:46.85+00:00","url":"https://junglewise.ai/threats/cve-2026-19542-gnu-c-library-tdelete-stack-based-buffer-overflow"},{"cve":"CVE-2026-19499","cvss":7.7,"epss":0.003,"slug":"cve-2026-19499-gnu-c-library-buffer-overflow-in-strfmon-right-justification","title":"GNU C Library buffer overflow in strfmon right-justification","severity":"high","exploited":false,"published_at":"2026-09-14T18:17:45.753+00:00","url":"https://junglewise.ai/threats/cve-2026-19499-gnu-c-library-buffer-overflow-in-strfmon-right-justification"},{"cve":"CVE-2026-89092","cvss":4.2,"epss":0.0027,"slug":"cve-2026-89092-gnu-c-library-nscd-stack-overflow-in-dns-cache-handling","title":"GNU C Library nscd stack overflow in DNS cache handling","severity":"medium","exploited":false,"published_at":"2026-09-11T02:18:35.46+00:00","url":"https://junglewise.ai/threats/cve-2026-89092-gnu-c-library-nscd-stack-overflow-in-dns-cache-handling"},{"cve":"CVE-2026-18374","cvss":4.9,"epss":0.0014,"slug":"cve-2026-18374-gnu-c-library-heap-buffer-overflow-in-fopen-ccs-handling","title":"GNU C Library heap buffer overflow in fopen ccs= handling","severity":"medium","exploited":false,"published_at":"2026-08-27T20:17:03.553+00:00","url":"https://junglewise.ai/threats/cve-2026-18374-gnu-c-library-heap-buffer-overflow-in-fopen-ccs-handling"},{"cve":"CVE-2023-4911","cvss":7.8,"slug":"cve-2023-4911-gnu-c-library-buffer-overflow-vulnerability","title":"GNU C Library Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-03T18:15:10.463+00:00","url":"https://junglewise.ai/threats/cve-2023-4911-gnu-c-library-buffer-overflow-vulnerability"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Gnu Binutils","slug":"binutils","vulnerabilities":36,"url":"https://junglewise.ai/threats/technologies/binutils"},{"name":"Gnu Glibc","slug":"glibc","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/glibc"},{"name":"GnuTLS","slug":"gnutls","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/gnutls"},{"name":"Gnu LibreDWG","slug":"libredwg","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/libredwg"},{"name":"GNU tar","slug":"tar","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/tar"},{"name":"Gnu Bash","slug":"bash","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/bash"},{"name":"Gnu Emacs","slug":"emacs","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/emacs"},{"name":"Gnu Wget","slug":"wget","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/wget"},{"name":"Gnu Grub2","slug":"grub2","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/grub2"},{"name":"GNU Coreutils","slug":"coreutils","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/coreutils"},{"name":"Gnu Cpio","slug":"cpio","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/cpio"},{"name":"Gnu Gawk","slug":"gawk","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/gawk"}],"technology":{"hub":true,"name":"GNU C Library","slug":"gnu-c-library","vendor":{"name":"Gnu","slug":"gnu","url":"https://junglewise.ai/threats/vendors/gnu"},"aliases":["c-library"],"homepage":"https://www.gnu.org/software/libc/","repo_url":"https://sourceware.org/git/glibc.git","description":"The GNU C Library (glibc) provides the core libraries for the GNU system and many systems with the Linux kernel.","url":"https://junglewise.ai/threats/technologies/gnu-c-library"},"most_severe":[{"cve":"CVE-2023-4911","cvss":7.8,"slug":"cve-2023-4911-gnu-c-library-buffer-overflow-vulnerability","title":"GNU C Library Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-03T18:15:10.463+00:00","url":"https://junglewise.ai/threats/cve-2023-4911-gnu-c-library-buffer-overflow-vulnerability"},{"cve":"CVE-2026-19499","cvss":7.7,"epss":0.003,"slug":"cve-2026-19499-gnu-c-library-buffer-overflow-in-strfmon-right-justification","title":"GNU C Library buffer overflow in strfmon right-justification","severity":"high","exploited":false,"published_at":"2026-09-14T18:17:45.753+00:00","url":"https://junglewise.ai/threats/cve-2026-19499-gnu-c-library-buffer-overflow-in-strfmon-right-justification"},{"cve":"CVE-2026-80489","cvss":5.9,"epss":0.0041,"slug":"cve-2026-80489-gnu-c-library-euc-jisx0213-converter-denial-of-service","title":"GNU C Library EUC_JISX0213 converter denial of service","severity":"medium","exploited":false,"published_at":"2026-09-15T11:17:12.193+00:00","url":"https://junglewise.ai/threats/cve-2026-80489-gnu-c-library-euc-jisx0213-converter-denial-of-service"},{"cve":"CVE-2026-19542","cvss":5.6,"epss":0.0023,"slug":"cve-2026-19542-gnu-c-library-tdelete-stack-based-buffer-overflow","title":"GNU C Library tdelete stack-based buffer overflow","severity":"medium","exploited":false,"published_at":"2026-09-14T18:17:46.85+00:00","url":"https://junglewise.ai/threats/cve-2026-19542-gnu-c-library-tdelete-stack-based-buffer-overflow"},{"cve":"CVE-2026-8674","cvss":5.3,"epss":0.0034,"slug":"cve-2026-8674-gnu-c-library-dns-resolver-assertion-failure-in-search-list","title":"GNU C Library DNS resolver assertion failure in search list parsing","severity":"medium","exploited":false,"published_at":"2026-09-17T17:16:53.22+00:00","url":"https://junglewise.ai/threats/cve-2026-8674-gnu-c-library-dns-resolver-assertion-failure-in-search-list"},{"cve":"CVE-2026-18374","cvss":4.9,"epss":0.0014,"slug":"cve-2026-18374-gnu-c-library-heap-buffer-overflow-in-fopen-ccs-handling","title":"GNU C Library heap buffer overflow in fopen ccs= handling","severity":"medium","exploited":false,"published_at":"2026-08-27T20:17:03.553+00:00","url":"https://junglewise.ai/threats/cve-2026-18374-gnu-c-library-heap-buffer-overflow-in-fopen-ccs-handling"},{"cve":"CVE-2026-89092","cvss":4.2,"epss":0.0027,"slug":"cve-2026-89092-gnu-c-library-nscd-stack-overflow-in-dns-cache-handling","title":"GNU C Library nscd stack overflow in DNS cache handling","severity":"medium","exploited":false,"published_at":"2026-09-11T02:18:35.46+00:00","url":"https://junglewise.ai/threats/cve-2026-89092-gnu-c-library-nscd-stack-overflow-in-dns-cache-handling"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}