diff --git a/d3xp/Game_network.cpp b/d3xp/Game_network.cpp
index cf6d3f3..e34b0d1 100644
--- a/d3xp/Game_network.cpp
+++ b/d3xp/Game_network.cpp
@@ -728,7 +728,7 @@ void idGameLocal::NetworkEventWarning( const entityNetEvent_t *event, const char
 	va_end( argptr );
 	idStr::Append( buf, sizeof(buf), "\n" );
 
-	common->DWarning( buf );
+	common->DWarning( "%s", buf );
 }
 
 /*
diff --git a/framework/CVarSystem.cpp b/framework/CVarSystem.cpp
index b28a7ae..a92c093 100644
--- a/framework/CVarSystem.cpp
+++ b/framework/CVarSystem.cpp
@@ -1216,7 +1216,7 @@ void idCVarSystemLocal::ListByFlags( const idCmdArgs &args, cvarFlags_t flags )
 				string += ( cvar->GetFlags() & CVAR_ARCHIVE ) ?		"AR "	: "   ";
 				string += ( cvar->GetFlags() & CVAR_MODIFIED ) ?	"MO "	: "   ";
 				string += "\n";
-				common->Printf( string );
+				common->Printf( "%s", string );
 			}
 			break;
 		}
diff --git a/framework/FileSystem.cpp b/framework/FileSystem.cpp
index a34abcb..b04c5c8 100644
--- a/framework/FileSystem.cpp
+++ b/framework/FileSystem.cpp
@@ -2003,7 +2003,7 @@ void idFileSystemLocal::Path_f( const idCmdArgs &args ) {
 				} else {
 					status += ")\n";
 				}
-				common->Printf( status.c_str() );
+				common->Printf( "%s", status.c_str() );
 			}
 			else
 			{
diff --git a/framework/Session.cpp b/framework/Session.cpp
index 7f1e8e5..49092f1 100644
--- a/framework/Session.cpp
+++ b/framework/Session.cpp
@@ -876,7 +876,7 @@ void idSessionLocal::StopPlayingRenderDemo() {
 		float	demoFPS = numDemoFrames / demoSeconds;
 		idStr	message = va( "%i frames rendered in %3.1f seconds = %3.1f fps\n", numDemoFrames, demoSeconds, demoFPS );
 
-		common->Printf( message );
+		common->Printf( "%s", message );
 		if ( timeDemo == TD_YES_THEN_QUIT ) {
 			cmdSystem->BufferCommandText( CMD_EXEC_APPEND, "quit\n" );
 		} else {
diff --git a/framework/async/AsyncClient.cpp b/framework/async/AsyncClient.cpp
index 8601930..2c897d4 100644
--- a/framework/async/AsyncClient.cpp
+++ b/framework/async/AsyncClient.cpp
@@ -1433,7 +1433,7 @@ bool idAsyncClient::ValidatePureServerChecksums( const netadr_t from, const idBi
 					message += va( common->GetLanguageDict()->GetString( "#str_06750" ), missingGamePakChecksum );
 				}
 
-				common->Printf( message );
+				common->Printf( "%s", message );
 				cmdSystem->BufferCommandText( CMD_EXEC_NOW, "disconnect" );
 				session->MessageBox( MSG_OK, message, common->GetLanguageDict()->GetString( "#str_06735" ), true );
 			} else {
diff --git a/framework/async/AsyncServer.cpp b/framework/async/AsyncServer.cpp
index 159e528..f0410c4 100644
--- a/framework/async/AsyncServer.cpp
+++ b/framework/async/AsyncServer.cpp
@@ -2533,7 +2533,7 @@ void idAsyncServer::RunFrame( void ) {
 
 			idStr msg;
 			GetAsyncStatsAvgMsg( msg );
-			common->Printf( va( "%s\n", msg.c_str() ) );
+			common->Printf( "%s", msg.c_str() );
 
 			nextAsyncStatsTime = serverTime + 1000;
 		}
diff --git a/idlib/math/Simd.cpp b/idlib/math/Simd.cpp
index 4aedc38..163ea6c 100644
--- a/idlib/math/Simd.cpp
+++ b/idlib/math/Simd.cpp
@@ -319,7 +319,7 @@ PrintClocks
 void PrintClocks( char *string, int dataCount, int clocks, int otherClocks = 0 ) {
 	int i;
 
-	idLib::common->Printf( string );
+	idLib::common->Printf( "%s", string );
 	for ( i = idStr::LengthWithoutColors(string); i < 48; i++ ) {
 		idLib::common->Printf(" ");
 	}
diff --git a/renderer/RenderSystem_init.cpp b/renderer/RenderSystem_init.cpp
index 9dd300a..79cd0f4 100644
--- a/renderer/RenderSystem_init.cpp
+++ b/renderer/RenderSystem_init.cpp
@@ -629,7 +629,7 @@ static void R_CheckPortableExtensions( void ) {
 	// check for minimum set
 	if ( !glConfig.multitextureAvailable || !glConfig.textureEnvCombineAvailable || !glConfig.cubeMapAvailable
 		|| !glConfig.envDot3Available ) {
-			common->Error( common->GetLanguageDict()->GetString( "#str_06780" ) );
+			common->Error( "%s", common->GetLanguageDict()->GetString( "#str_06780" ) );
 	}
 
  	// GL_EXT_depth_bounds_test
diff --git a/tools/compilers/aas/Brush.cpp b/tools/compilers/aas/Brush.cpp
index 659a6c9..44f12dd 100644
--- a/tools/compilers/aas/Brush.cpp
+++ b/tools/compilers/aas/Brush.cpp
@@ -55,7 +55,7 @@ void DisplayRealTimeString( char *string, ... ) {
 		va_start( argPtr, string );
 		vsprintf( buf, string, argPtr );
 		va_end( argPtr );
-		common->Printf( buf );
+		common->Printf( "%s", buf );
 		lastUpdateTime = time;
 	}
 }