Codeready Linux Builder For Arm64 Eus

Vendor:

First CVE: Mar 6, 2023 · Active for 3 years

17
Total CVEs
More Total CVEs than 94% of tracked products
5.7
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
7.1
Avg CVSS
Higher Avg CVSS than 45% of tracked products
11.8%
KEV Rate
Higher KEV Rate than 99% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Codeready Linux Builder For Arm64 Eus over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 6, 2023
3 years ago
Most Recent CVE
Nov 26, 2025
244 days ago

CVE Severity & Scoring

Codeready Linux Builder For Arm64 Eus17 CVEs
All CVEs353,240 CVEs
MediumHigh
Attack Vector
Local5 (29.4%)
Network11 (64.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network1 (5.9%)
Attack Complexity
Low13 (76.5%)
High4 (23.5%)
Unknown0 (0.0%)
User Interaction
None15 (88.2%)
Unknown0 (0.0%)
Required2 (11.8%)
Privileges Required
Low7 (41.2%)
High1 (5.9%)
None9 (52.9%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (17 CVEs).

17 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to us
Oct 3, 20237.898YESYES
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addre
Mar 6, 20238.865YESNO
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents,
Apr 3, 20257.433NONO
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a ver
Nov 26, 20257.730NONO
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue ex
Dec 10, 20238.829NONO
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a craft
Feb 27, 20257.824NONO
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byt
Apr 3, 20256.523NONO
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denyin
Apr 18, 20247.123NONO
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading
Feb 7, 20247.523NONO
A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue i
Sep 18, 20235.923NONO

Exploit Exposure

Signals from CVEs in this product scope (17 CVEs).

CISA KEV
2 CVEs
11.8% of CVEs· 99th percentile
Metasploit
1 CVE
5.9% of CVEs· 97th percentile
Nuclei
1 CVE
5.9% of CVEs· 97th percentile
ExploitDB
1 CVE
5.9% of CVEs· 86th percentile

Social Chatter

Signals from CVEs in this product scope (17 CVEs).

Media Mentions

Signals from CVEs in this product scope (17 CVEs).

Top CNAs Publishing CVEs For Codeready Linux Builder For Arm64 Eus

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
9.6_aarch6437.431.6%11
9.4_aarch6467.515.9%11
9.417.70.3%00
9.2_aarch64126.99.4%11
9.0_aarch6446.22.7%00
8.8_aarch6437.44.6%00
8.6_aarch6476.72.2%00
8.628.341.5%21
8.418.81.5%10
8.018.81.5%10
10.0_aarch6416.50.8%00
10.017.70.3%00