Linux

Vendor:

First CVE: Dec 18, 2007 · Active for 18 years

230
Total CVEs
More Total CVEs than 100% of tracked products
17.7
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 32% of tracked products
3.0%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Linux over time

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 18, 2007
18 years ago
Most Recent CVE
May 1, 2026
84 days ago

CVE Severity & Scoring

Linux230 CVEs
All CVEs352,294 CVEs
LowMediumHighCritical
Attack Vector
Local50 (21.7%)
Network111 (48.3%)
Unknown69 (30.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low141 (61.3%)
High20 (8.7%)
Unknown69 (30.0%)
User Interaction
None108 (47.0%)
Unknown69 (30.0%)
Required53 (23.0%)
Privileges Required
Low42 (18.3%)
High4 (1.7%)
None115 (50.0%)
Unknown69 (30.0%)

Top CVEs

Signals from CVEs in this product scope (230 CVEs).

230 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra
Sep 24, 20149.899YESYES
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wri
Sep 25, 20149.898YESYES
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and avai
Apr 21, 20169.895YESNO
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted ima
May 5, 20165.593YESYES
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
May 5, 20165.593YESYES
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code
Jan 28, 201510.092NOYES
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain priv
Jun 7, 20147.890YESYES
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause
Sep 28, 20167.587NOYES
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (
Jan 2, 20145.083NOYES
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users
May 7, 20145.578YESYES

Exploit Exposure

Signals from CVEs in this product scope (230 CVEs).

CISA KEV
7 CVEs
3.0% of CVEs· 97th percentile
Metasploit
8 CVEs
3.5% of CVEs· 96th percentile
Nuclei
1 CVE
0.4% of CVEs· 96th percentile
ExploitDB
13 CVEs
5.7% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (230 CVEs).

Media Mentions

Signals from CVEs in this product scope (230 CVEs).

Top CNAs Publishing CVEs For Linux

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
965.40.2%00
8106.00.3%00
7.019.63.8%00
71886.711.8%39
6.027.52.1%00
61327.315.2%79
5.0527.86.3%02
5236.527.5%44
438.467.1%22
1035.10.1%00