CVE-2022-26691

MEDIUM 6.7CVE-2022-26691 · Published 26/05/2022 · updated 17/06/2026

In short

CVE-2022-26691 is a MEDIUM (CVSS 6.7) vulnerability affecting cups (apple), cups (openprinting).
Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 48.5% of all vulnerabilities.
Fix: update to 499.4, 2.4.2 or later.

Package	Affected versions	Patched versions
cups apple	`< 499.4`	`499.4`
cups openprinting	`< 2.4.2`	`2.4.2`

Description

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.

References

OpenPrinting/cups commit de4f8c1 · Patch
mandiant/Vulnerability-Disclosures · Third Party Advisory
lists.debian.org/debian-lts-announce/2022/05/msg00039.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQ6TD7F3VRITPEHFDHZHK7MU6FEBMZ5U
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQRIT4H75XV6M42K7ZTARWZ7YLLYQHPO
support.apple.com/en-us/HT213183 · Release Notes
support.apple.com/en-us/HT213184 · Release Notes
support.apple.com/en-us/HT213185 · Release Notes
debian.org/security/2022/dsa-5149 · Third Party Advisory

More vulnerabilities in cups

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cups

apple

< 499.4

499.4

cups

openprinting

< 2.4.2

2.4.2

More vulnerabilities in cups

See all →