Linux
Vendor:
First CVE: Dec 18, 2007 · Active for 18 years
230
Total CVEs
More Total CVEs than 100% of tracked products
17.7
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 32% of tracked products
3.0%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Linux over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 18, 2007
18 years ago
Most Recent CVE
May 1, 2026
84 days ago
CVE Severity & Scoring
Linux230 CVEs
8%
44%
38%
10%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local50 (21.7%)
Network111 (48.3%)
Unknown69 (30.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low141 (61.3%)
High20 (8.7%)
Unknown69 (30.0%)
User Interaction
None108 (47.0%)
Unknown69 (30.0%)
Required53 (23.0%)
Privileges Required
Low42 (18.3%)
High4 (1.7%)
None115 (50.0%)
Unknown69 (30.0%)
Top CVEs
Signals from CVEs in this product scope (230 CVEs).
230 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-6271CRITICAL GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra | Sep 24, 2014 | 9.8 | 99 | YES | YES |
CVE-2014-7169CRITICAL GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wri | Sep 25, 2014 | 9.8 | 98 | YES | YES |
CVE-2016-3427CRITICAL Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and avai | Apr 21, 2016 | 9.8 | 95 | YES | NO |
CVE-2016-3718MEDIUM The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted ima | May 5, 2016 | 5.5 | 93 | YES | YES |
CVE-2016-3715MEDIUM The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. | May 5, 2016 | 5.5 | 93 | YES | YES |
CVE-2015-0235HIGH Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code | Jan 28, 2015 | 10.0 | 92 | NO | YES |
CVE-2014-3153HIGH The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain priv | Jun 7, 2014 | 7.8 | 90 | YES | YES |
CVE-2016-2776HIGH buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause | Sep 28, 2016 | 7.5 | 87 | NO | YES |
CVE-2013-5211MEDIUM The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or ( | Jan 2, 2014 | 5.0 | 83 | NO | YES |
CVE-2014-0196MEDIUM The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users | May 7, 2014 | 5.5 | 78 | YES | YES |
Exploit Exposure
Signals from CVEs in this product scope (230 CVEs).
CISA KEV
7 CVEs
3.0% of CVEs· 97th percentile
Metasploit
8 CVEs
3.5% of CVEs· 96th percentile
Nuclei
1 CVE
0.4% of CVEs· 96th percentile
ExploitDB
13 CVEs
5.7% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (230 CVEs).
Media Mentions
Signals from CVEs in this product scope (230 CVEs).
Top CNAs Publishing CVEs For Linux
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9 | 6 | 5.4 | 0.2% | 0 | 0 |
| 8 | 10 | 6.0 | 0.3% | 0 | 0 |
| 7.0 | 1 | 9.6 | 3.8% | 0 | 0 |
| 7 | 188 | 6.7 | 11.8% | 3 | 9 |
| 6.0 | 2 | 7.5 | 2.1% | 0 | 0 |
| 6 | 132 | 7.3 | 15.2% | 7 | 9 |
| 5.0 | 52 | 7.8 | 6.3% | 0 | 2 |
| 5 | 23 | 6.5 | 27.5% | 4 | 4 |
| 4 | 3 | 8.4 | 67.1% | 2 | 2 |
| 10 | 3 | 5.1 | 0.1% | 0 | 0 |