PatchTheCVEglibc vulnerabilities and fixes
CVEs that mention glibc, ranked by priority. 2 tracked.
glibc has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-10-21. Highest priority: CVE-2026-114112 (score 33/100).
- CVE-2026-114112 HIGH 8.9 Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote c
- CVE-2026-114111 HIGH 8.9 sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE-2026-96889) t
FAQ
How do I fix glibc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is glibc being exploited right now?
None of the tracked glibc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which glibc CVE should I patch first?
CVE-2026-114112 currently ranks highest (33/100): Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote c.
Newest glibc CVEs
- CVE-2026-114112 HIGH 8.9 2026-10-21: Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achie
- CVE-2026-114111 HIGH 8.9 2026-10-21: sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerabilit
Live from the NVD (last 120 days)
Loading…