CVE Program partner

Lexmark

Lexmark International Inc.

API
CVEs, 365 days521 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationLexmark International Inc.
RoleCNA
TypeVendor
Reports tomitre
ScopeLexmark products only.
Advisorieshttps://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html

Latest CVEs · RSS

  • CVE-2025-65078 2026-02-03 · CVSS 9.3
    An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged b
  • CVE-2025-65077 2026-02-03 · CVSS 8.8
    A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged
  • CVE-2025-65081 2026-02-03 · CVSS 6.9
    An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an atta
  • CVE-2025-65080 2026-02-03 · CVSS 6.9
    A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker
  • CVE-2025-65079 2026-02-03 · CVSS 6.9
    A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by
  • CVE-2025-9269 2025-09-09 · CVSS 6.9
    A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leverage
  • CVE-2025-4046 2025-08-19 · CVSS 8.5
    A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization
  • CVE-2025-4044 2025-08-19 · CVSS 8.2
    Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arb
  • CVE-2024-11347 2025-02-13 · CVSS 7.3
    Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vu
  • CVE-2024-11346 2025-02-13 · CVSS 7.3
    : Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allo
  • CVE-2024-11344 2025-02-13 · CVSS 7.3
    A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker t
  • CVE-2025-1127 2025-02-13 · CVSS 9.1
    The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.
  • CVE-2024-11345 2025-02-13 · CVSS 7.3
    A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacke
  • CVE-2025-1126 2025-02-11 · CVSS 9.3
    A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client.
  • CVE-2023-50733 2025-01-21 · CVSS 8.6
    A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer Lexmark devices.
  • CVE-2023-50739 2025-01-17 · CVSS 8.8
    A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. The vulnerability can be leveraged by an
  • CVE-2023-50738 2025-01-17 · CVSS 4.3
    A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified.
  • CVE-2023-50737 2024-02-28 · CVSS 9.1
    The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to ex
  • CVE-2023-50736 2024-02-28 · CVSS 9.0
    A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to
  • CVE-2023-50735 2024-02-28 · CVSS 9.0
    A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to e
  • CVE-2023-50734 2024-02-28 · CVSS 9.0
    A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to e

All CVE Program partners