Lexmark
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| various | 5 | – | Jan 21, 2025 |
| MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ | 5 | – | Feb 3, 2026 |
| CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG | 5 | – | Feb 3, 2026 |
| CX, XC, CS, MS, MX, XM, et. al. | 3 | – | Sep 9, 2025 |
| Printer Firmware | 2 | – | Jan 17, 2025 |
| Lexmark Print Management Client | 1 | – | Feb 11, 2025 |
| Universal Print Driver | 1 | – | Aug 19, 2025 |
| Printer Software G2 | 1 | – | Aug 19, 2025 |
| Lexmark Cloud Services | 1 | – | Aug 19, 2025 |
Exploited and recent CVEs
- CVE-2025-65078 Untrusted search path vulnerability in Embedded Solutions Framework 0.6%
- CVE-2025-65078 Untrusted search path vulnerability in Embedded Solutions Framework 0.6%
- CVE-2025-65077 Relative path traversal vulnerability in Embedded Solutions Framework 0.7%
- CVE-2025-65077 Relative path traversal vulnerability in Embedded Solutions Framework 0.7%
- CVE-2025-65081 Out-of-bounds read vulnerability in Postscript interpreter 0.6%
- CVE-2025-65081 Out-of-bounds read vulnerability in Postscript interpreter 0.6%
- CVE-2025-65080 Type confusion vulnerability in Postscript interpreter 0.5%
- CVE-2025-65080 Type confusion vulnerability in Postscript interpreter 0.5%
- CVE-2025-65079 Heap-based buffer overflow vulnerability in Postscript interpreter 0.5%
- CVE-2025-65079 Heap-based buffer overflow vulnerability in Postscript interpreter 0.5%
- CVE-2025-9269 Server-Side Request Forgery (SSRF) vulnerability found in embedded web server 0.3%
- CVE-2025-4046 Missing Authorization in Lexmark Cloud Services badge management 0.3%
- CVE-2025-4044 XML External Entity Injection vulnerability in various Lexmark Universal Drivers 0.2%
- CVE-2025-4044 XML External Entity Injection vulnerability in various Lexmark Universal Drivers 0.2%
- CVE-2024-11344 Type confusion vulnerability in the Postscript interpreter in various Lexmark devices 0.5%
- CVE-2025-1127 Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server 0.5%
- CVE-2025-1126 Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC). 0.3%
- CVE-2023-50733 A Server-Side Request Forgery (SSRF) vulnerability exists in newer Lexmark devices. 0.4%
- CVE-2023-50739 A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. 0.6%
- CVE-2023-50738 A firmware downgrade prevention vulnerability has been identified in newer Lexmark devices. 0.3%
- CVE-2023-50737 An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code. 1.0%
- CVE-2023-50736 A vulnerability has been identified in the PostScript interpreter in various Lexmark devices. 0.8%
- CVE-2023-50735 A vulnerability has been identified in the PostScript interpreter in various Lexmark devices. 0.8%
- CVE-2023-50734 A vulnerability has been identified in the PostScript interpreter in various Lexmark devices. 0.8%