<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Lexmark International Inc. — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/lexmark" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Lexmark International Inc. (lexmark).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/lexmark.png</url>
      <title>Lexmark International Inc. — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:06 GMT</lastBuildDate>
    <item>
      <title>CVE-2025-65078 · 9.3 CRITICAL 🌩️ — Untrusted search path vulnerability in Embedded Solutions Framework</title>
      <link>https://vulnogram.org/CVE-2025-65078</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-65078</guid>
      <description>An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 03 Feb 2026 20:51:20 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-65077 · 8.8 HIGH 🌩️ — Relative path traversal vulnerability in Embedded Solutions Framework</title>
      <link>https://vulnogram.org/CVE-2025-65077</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-65077</guid>
      <description>A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 03 Feb 2026 20:44:32 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-65081 · 6.9 MEDIUM 🌩️ — Out-of-bounds read vulnerability in Postscript interpreter</title>
      <link>https://vulnogram.org/CVE-2025-65081</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-65081</guid>
      <description>An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 03 Feb 2026 20:39:14 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-65080 · 6.9 MEDIUM 🌩️ — Type confusion vulnerability in Postscript interpreter</title>
      <link>https://vulnogram.org/CVE-2025-65080</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-65080</guid>
      <description>A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 03 Feb 2026 20:35:54 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-65079 · 6.9 MEDIUM 🌩️ — Heap-based buffer overflow vulnerability in Postscript interpreter</title>
      <link>https://vulnogram.org/CVE-2025-65079</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-65079</guid>
      <description>A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 03 Feb 2026 20:23:24 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-9269 · 6.9 MEDIUM 🌩️ — Server-Side Request Forgery (SSRF) vulnerability found in embedded web server</title>
      <link>https://vulnogram.org/CVE-2025-9269</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-9269</guid>
      <description>A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party se…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 09 Sep 2025 17:21:36 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-4046 · 8.5 HIGH — Missing Authorization in Lexmark Cloud Services badge management</title>
      <link>https://vulnogram.org/CVE-2025-4046</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-4046</guid>
      <description>A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization</description>
      <category>High</category>
      <pubDate>Tue, 19 Aug 2025 13:12:28 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-4044 · 8.2 HIGH — XML External Entity Injection vulnerability in various Lexmark Universal Drivers</title>
      <link>https://vulnogram.org/CVE-2025-4044</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-4044</guid>
      <description>Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.</description>
      <category>High</category>
      <pubDate>Tue, 19 Aug 2025 13:12:09 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-11347 · 7.3 HIGH 🌩️ — Access of Resource Using Incompatible Type in Postscript interpreter</title>
      <link>https://vulnogram.org/CVE-2024-11347</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-11347</guid>
      <description>Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged u…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 13 Feb 2025 18:55:22 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-11346 · 7.3 HIGH 🌩️ — Access of Resource Using Incompatible Type in Postscript interpreter</title>
      <link>https://vulnogram.org/CVE-2024-11346</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-11346</guid>
      <description>: Access of Resource Using Incompatible Type (&apos;Type Confusion&apos;) vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.2…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 13 Feb 2025 18:54:41 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-11344 · 7.3 HIGH 🌩️ — Type confusion vulnerability in the Postscript interpreter in various Lexmark devices</title>
      <link>https://vulnogram.org/CVE-2024-11344</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-11344</guid>
      <description>A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 13 Feb 2025 18:51:23 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-1127 · 9.1 CRITICAL — Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server</title>
      <link>https://vulnogram.org/CVE-2025-1127</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-1127</guid>
      <description>The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.</description>
      <category>Critical</category>
      <pubDate>Thu, 13 Feb 2025 18:49:43 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-11345 · 7.3 HIGH 🌩️ — Heap-based memory vulnerability in the Postscript interpreter in various Lexmark devices</title>
      <link>https://vulnogram.org/CVE-2024-11345</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-11345</guid>
      <description>A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 13 Feb 2025 18:46:33 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-1126 · 9.3 CRITICAL — Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).</title>
      <link>https://vulnogram.org/CVE-2025-1126</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-1126</guid>
      <description>A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client.</description>
      <category>Critical</category>
      <pubDate>Tue, 11 Feb 2025 16:50:34 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-50733 · 8.6 HIGH 🌩️ — A Server-Side Request Forgery (SSRF) vulnerability exists in newer Lexmark devices.</title>
      <link>https://vulnogram.org/CVE-2023-50733</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-50733</guid>
      <description>A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer Lexmark devices.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 21 Jan 2025 22:03:28 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-50739 · 8.8 HIGH — A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.</title>
      <link>https://vulnogram.org/CVE-2023-50739</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-50739</guid>
      <description>A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.</description>
      <category>High</category>
      <pubDate>Fri, 17 Jan 2025 23:47:13 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-50738 · 4.3 MEDIUM — A firmware downgrade prevention vulnerability has been identified in newer Lexmark devices.</title>
      <link>https://vulnogram.org/CVE-2023-50738</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-50738</guid>
      <description>A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified.</description>
      <category>Medium</category>
      <pubDate>Fri, 17 Jan 2025 21:10:44 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-50737 · 9.1 CRITICAL — An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.</title>
      <link>https://vulnogram.org/CVE-2023-50737</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-50737</guid>
      <description>The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.</description>
      <category>Critical</category>
      <pubDate>Wed, 28 Feb 2024 02:38:03 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-50736 · 9 CRITICAL 🌩️ — A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.</title>
      <link>https://vulnogram.org/CVE-2023-50736</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-50736</guid>
      <description>A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 28 Feb 2024 02:37:45 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-50735 · 9 CRITICAL 🌩️ — A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.</title>
      <link>https://vulnogram.org/CVE-2023-50735</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-50735</guid>
      <description>A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 28 Feb 2024 02:37:26 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-50734 · 9 CRITICAL 🌩️ — A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.</title>
      <link>https://vulnogram.org/CVE-2023-50734</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-50734</guid>
      <description>A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 28 Feb 2024 01:47:47 GMT</pubDate>
    </item>
  </channel>
</rss>
