Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Libcap Project

First CVE: Feb 8, 2014Active for: 12 yearsTotal CVEs: 4

Libcap is a narrowly scoped system library that implements POSIX capability management for Linux, sitting low in the software stack where it is embedded across a broad range of privileged userspace tools and daemons. Its vulnerability footprint centers on the libcap library itself and reflects memory-management and timing-sensitive weakness classes including integer overflow, use-after-free conditions, and time-of-check-time-of-use race conditions that recur in systems code responsible for privilege boundary enforcement. Current exploitation activity and exposure counts are shown alongside this summary.

FAUCET AI Generated
4
Total CVEs
More Total CVEs than 72% of tracked vendors
1.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 76% of tracked vendors
5.7
Avg CVSS Score
Higher Avg CVSS Score than 29% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Libcap Project over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 8, 2014
12 years ago
Most Recent CVE
Apr 9, 2026
108 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (4 CVEs).

4 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-4878HIGH
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker w
Apr 9, 20267.029NONO
CVE-2023-2603HIGH
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
Jun 6, 20237.824NONO
CVE-2011-4099MEDIUM
The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restricti
Feb 8, 20144.617NONO
CVE-2023-2602LOW
A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exha
Jun 6, 20233.315NONO
View all 4 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products4 CVEs
25%
25%
50%
Severity distribution among all CVEs352,713 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local3 (75.0%)
Network0 (0.0%)
Unknown1 (25.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low2 (50.0%)
High1 (25.0%)
Unknown1 (25.0%)
User Interaction
None3 (75.0%)
Unknown1 (25.0%)
Required0 (0.0%)
Privileges Required
Low3 (75.0%)
High0 (0.0%)
None0 (0.0%)
Unknown1 (25.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (4 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Libcap Project.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Libcap Project — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Libcap Project's Products

View all 1 CNAs →

Top CWEs