Lexmark vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2025-65078 An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices.Critical 9.3 · Feb 3, 2026
• CVE-2025-65077 A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices.High 8.8 · Feb 3, 2026
• CVE-2025-4046 A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organizationHigh 8.5 · Aug 19, 2025
• CVE-2025-4044 Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbHigh 8.2 · Aug 19, 2025
• CVE-2025-1127 The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.Critical 9.1 · Feb 13, 2025
• CVE-2024-11347 Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et.High 7.3 · Feb 13, 2025
• CVE-2024-11346 : Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark International CX, XC, CS, et.High 7.3 · Feb 13, 2025
• CVE-2024-11345 A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices.High 7.3 · Feb 13, 2025
• CVE-2024-11344 A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices.High 7.3 · Feb 13, 2025
• CVE-2025-1126 A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client.Critical 9.3 · Feb 11, 2025
• CVE-2023-50733 A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer Lexmark devices.High 8.6 · Jan 21, 2025
• CVE-2023-50739 A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.High 8.8 · Jan 17, 2025
• CVE-2023-50737 The SE menu contains information used by Lexmark to diagnose device errors.Critical 9.1 · Feb 27, 2024
• CVE-2023-50736 A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices.Critical 9 · Feb 27, 2024
• CVE-2023-50735 A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices.Critical 9 · Feb 27, 2024
• CVE-2023-50734 A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices.Critical 9 · Feb 27, 2024
• CVE-2023-40239 Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure.High 7.5 · Sep 1, 2023
• CVE-2023-26070 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).Critical 9.8 · Apr 10, 2023
• CVE-2023-26069 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4).Critical 9.8 · Apr 10, 2023
• CVE-2023-26068 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).Critical 9.8 · Apr 10, 2023
• CVE-2023-26067 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).High 8.1 · Apr 10, 2023
• CVE-2023-26066 Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.Critical 9.8 · Apr 10, 2023
• CVE-2023-26065 Certain Lexmark devices through 2023-02-19 have an Integer Overflow.Critical 9.8 · Apr 10, 2023
• CVE-2023-26064 Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.Critical 9.8 · Apr 10, 2023
• CVE-2023-26063 Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.Critical 9.8 · Apr 10, 2023