CVE-2004-0926 [Critical] | Memory Corruption in Cups

CVE-2004-0926 is rated High Risk (73.1/100): CVSS Critical severity, with high exploitation likelihood (EPSS 4.89%, 91th percentile). EPSS ranks this CVE among the most likely to be exploited in the near term. EPSS rose +1.23% over the last day, indicating growing attacker interest. High exploitation likelihood—assess exposure and prioritize remediation.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2026-06-15	3.66%	4.89%	+1.23%
2	2025-03-30	4.12%	3.66%	-0.47%
3	2025-03-29	—	4.12%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2026-06-15

3.66%

4.89%

+1.23%

2025-03-30

4.12%

3.66%

-0.47%

2025-03-29

—

4.12%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
10.0	2.0	HIGH	`AV:N/AC:L/Au:N/C:C/I:C/A:C` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:L) Exploitation conditions are straightforward and predictable. Authentication (AU:N) No authentication is required. Confidentiality impact (C:C) Complete confidentiality impact. Integrity impact (I:C) Complete integrity impact. Availability impact (A:C) Complete availability impact.	10.0	10.0	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

10.0

2.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:L): Exploitation conditions are straightforward and predictable.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:C): Complete confidentiality impact.
Integrity impact (I:C): Complete integrity impact.
Availability impact (A:C): Complete availability impact.

10.0

[email protected]

Affected software / configurations for CVE-2004-0926

Vendor	Product	Version	Raw CPE
easy_software_products	cups	1.0.4	cpe:2.3:a:easy_software_products:cups:1.0.4:::::::*
easy_software_products	cups	1.0.4_8	cpe:2.3:a:easy_software_products:cups:1.0.4_8:::::::*
easy_software_products	cups	1.1.1	cpe:2.3:a:easy_software_products:cups:1.1.1:::::::*
easy_software_products	cups	1.1.4	cpe:2.3:a:easy_software_products:cups:1.1.4:::::::*
easy_software_products	cups	1.1.4_2	cpe:2.3:a:easy_software_products:cups:1.1.4_2:::::::*
easy_software_products	cups	1.1.4_3	cpe:2.3:a:easy_software_products:cups:1.1.4_3:::::::*
easy_software_products	cups	1.1.4_5	cpe:2.3:a:easy_software_products:cups:1.1.4_5:::::::*
easy_software_products	cups	1.1.6	cpe:2.3:a:easy_software_products:cups:1.1.6:::::::*
easy_software_products	cups	1.1.7	cpe:2.3:a:easy_software_products:cups:1.1.7:::::::*
easy_software_products	cups	1.1.10	cpe:2.3:a:easy_software_products:cups:1.1.10:::::::*
easy_software_products	cups	1.1.12	cpe:2.3:a:easy_software_products:cups:1.1.12:::::::*
easy_software_products	cups	1.1.13	cpe:2.3:a:easy_software_products:cups:1.1.13:::::::*
easy_software_products	cups	1.1.14	cpe:2.3:a:easy_software_products:cups:1.1.14:::::::*
easy_software_products	cups	1.1.15	cpe:2.3:a:easy_software_products:cups:1.1.15:::::::*
easy_software_products	cups	1.1.16	cpe:2.3:a:easy_software_products:cups:1.1.16:::::::*
easy_software_products	cups	1.1.17	cpe:2.3:a:easy_software_products:cups:1.1.17:::::::*
easy_software_products	cups	1.1.18	cpe:2.3:a:easy_software_products:cups:1.1.18:::::::*
easy_software_products	cups	1.1.19	cpe:2.3:a:easy_software_products:cups:1.1.19:::::::*
easy_software_products	cups	1.1.19_rc5	cpe:2.3:a:easy_software_products:cups:1.1.19_rc5:::::::*
easy_software_products	cups	1.1.20	cpe:2.3:a:easy_software_products:cups:1.1.20:::::::*
easy_software_products	cups	1.1.21	cpe:2.3:a:easy_software_products:cups:1.1.21:::::::*
apple	mac_os_x	10.2	cpe:2.3:o:apple:mac_os_x:10.2:::::::*
apple	mac_os_x	10.2.1	cpe:2.3:o:apple:mac_os_x:10.2.1:::::::*
apple	mac_os_x	10.2.2	cpe:2.3:o:apple:mac_os_x:10.2.2:::::::*
apple	mac_os_x	10.2.3	cpe:2.3:o:apple:mac_os_x:10.2.3:::::::*
apple	mac_os_x	10.2.4	cpe:2.3:o:apple:mac_os_x:10.2.4:::::::*
apple	mac_os_x	10.2.5	cpe:2.3:o:apple:mac_os_x:10.2.5:::::::*
apple	mac_os_x	10.2.6	cpe:2.3:o:apple:mac_os_x:10.2.6:::::::*
apple	mac_os_x	10.2.7	cpe:2.3:o:apple:mac_os_x:10.2.7:::::::*
apple	mac_os_x	10.2.8	cpe:2.3:o:apple:mac_os_x:10.2.8:::::::*
apple	mac_os_x	10.3	cpe:2.3:o:apple:mac_os_x:10.3:::::::*
apple	mac_os_x	10.3.1	cpe:2.3:o:apple:mac_os_x:10.3.1:::::::*
apple	mac_os_x	10.3.2	cpe:2.3:o:apple:mac_os_x:10.3.2:::::::*
apple	mac_os_x	10.3.3	cpe:2.3:o:apple:mac_os_x:10.3.3:::::::*
apple	mac_os_x	10.3.4	cpe:2.3:o:apple:mac_os_x:10.3.4:::::::*
apple	mac_os_x	10.3.5	cpe:2.3:o:apple:mac_os_x:10.3.5:::::::*
apple	mac_os_x_server	10.2	cpe:2.3:o:apple:mac_os_x_server:10.2:::::::*
apple	mac_os_x_server	10.2.1	cpe:2.3:o:apple:mac_os_x_server:10.2.1:::::::*
apple	mac_os_x_server	10.2.2	cpe:2.3:o:apple:mac_os_x_server:10.2.2:::::::*
apple	mac_os_x_server	10.2.3	cpe:2.3:o:apple:mac_os_x_server:10.2.3:::::::*
apple	mac_os_x_server	10.2.4	cpe:2.3:o:apple:mac_os_x_server:10.2.4:::::::*
apple	mac_os_x_server	10.2.5	cpe:2.3:o:apple:mac_os_x_server:10.2.5:::::::*
apple	mac_os_x_server	10.2.6	cpe:2.3:o:apple:mac_os_x_server:10.2.6:::::::*
apple	mac_os_x_server	10.2.7	cpe:2.3:o:apple:mac_os_x_server:10.2.7:::::::*
apple	mac_os_x_server	10.2.8	cpe:2.3:o:apple:mac_os_x_server:10.2.8:::::::*
apple	mac_os_x_server	10.3	cpe:2.3:o:apple:mac_os_x_server:10.3:::::::*
apple	mac_os_x_server	10.3.1	cpe:2.3:o:apple:mac_os_x_server:10.3.1:::::::*
apple	mac_os_x_server	10.3.2	cpe:2.3:o:apple:mac_os_x_server:10.3.2:::::::*
apple	mac_os_x_server	10.3.3	cpe:2.3:o:apple:mac_os_x_server:10.3.3:::::::*
apple	mac_os_x_server	10.3.4	cpe:2.3:o:apple:mac_os_x_server:10.3.4:::::::*
apple	mac_os_x_server	10.3.5	cpe:2.3:o:apple:mac_os_x_server:10.3.5:::::::*

References for CVE-2004-0926

URL	Tags
http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html	Patch Vendor Advisory
http://lists.apple.com/archives/security-announce/2004/Oct/msg00001.html
http://www.securityfocus.com/bid/11322	Patch Vendor Advisory

URL

CVE-2004-0926

Exploit prediction scoring system (EPSS) score for CVE-2004-0926

Common vulnerability scoring system (CVSS) metrics for CVE-2004-0926

Weakness enumeration for CVE-2004-0926

Affected software / configurations for CVE-2004-0926

References for CVE-2004-0926