Enterprise Linux Eus
Vendor:
First CVE: Oct 5, 2006 · Active for 19 years
791
Total CVEs
More Total CVEs than 100% of tracked products
37.7
Avg CVEs / Year
Higher CVE frequency than 99% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 33% of tracked products
5.2%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Enterprise Linux Eus over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 5, 2006
19 years ago
Most Recent CVE
Apr 22, 2026
93 days ago
CVE Severity & Scoring
Enterprise Linux Eus791 CVEs
9%
45%
37%
9%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local112 (14.2%)
Network414 (52.3%)
Unknown257 (32.5%)
Physical1 (0.1%)
Adjacent Network7 (0.9%)
Attack Complexity
Low415 (52.5%)
High119 (15.0%)
Unknown257 (32.5%)
User Interaction
None426 (53.9%)
Unknown257 (32.5%)
Required108 (13.7%)
Privileges Required
Low151 (19.1%)
High86 (10.9%)
None297 (37.5%)
Unknown257 (32.5%)
Top CVEs
Signals from CVEs in this product scope (791 CVEs).
791 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-31431HIGH In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the c | Apr 22, 2026 | 7.8 | 99 | YES | YES |
CVE-2017-12617HIGH When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation | Oct 4, 2017 | 8.1 | 99 | YES | YES |
CVE-2014-6271CRITICAL GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra | Sep 24, 2014 | 9.8 | 99 | YES | YES |
CVE-2012-1823CRITICAL sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) | May 11, 2012 | 9.8 | 99 | YES | YES |
CVE-2023-4911HIGH A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to us | Oct 3, 2023 | 7.8 | 98 | YES | YES |
CVE-2022-0847HIGH A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux ker | Mar 10, 2022 | 7.8 | 98 | YES | YES |
CVE-2021-4034HIGH A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as pri | Jan 28, 2022 | 7.8 | 98 | YES | YES |
CVE-2019-11043CRITICAL In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buff | Oct 28, 2019 | 9.8 | 98 | YES | YES |
CVE-2017-12615HIGH When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upl | Sep 19, 2017 | 8.1 | 98 | YES | YES |
CVE-2017-8291HIGH Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps doc | Apr 27, 2017 | 7.8 | 98 | YES | YES |
Exploit Exposure
Signals from CVEs in this product scope (791 CVEs).
CISA KEV
41 CVEs
5.2% of CVEs· 97th percentile
Metasploit
24 CVEs
3.0% of CVEs· 96th percentile
Nuclei
8 CVEs
1.0% of CVEs· 96th percentile
ExploitDB
52 CVEs
6.6% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (791 CVEs).
Media Mentions
Signals from CVEs in this product scope (791 CVEs).
Top CNAs Publishing CVEs For Enterprise Linux Eus
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.6 | 9 | 7.4 | 23.2% | 2 | 2 |
| 9.4 | 24 | 7.1 | 13.1% | 3 | 3 |
| 9.2 | 41 | 7.0 | 6.0% | 1 | 1 |
| 9.0 | 21 | 6.8 | 5.5% | 0 | 0 |
| 8.8 | 31 | 7.1 | 13.0% | 3 | 3 |
| 8.6 | 173 | 5.8 | 6.7% | 6 | 7 |
| 8.4 | 183 | 6.3 | 8.2% | 7 | 11 |
| 8.2 | 175 | 6.3 | 8.6% | 6 | 12 |
| 8.1 | 191 | 6.1 | 7.2% | 3 | 9 |
| 7.7 | 210 | 6.1 | 11.4% | 10 | 13 |
| 7.6 | 197 | 6.2 | 11.2% | 9 | 12 |
| 7.5 | 198 | 6.2 | 11.9% | 11 | 15 |
| 7.4 | 175 | 6.2 | 13.0% | 11 | 12 |
| 7.3 | 117 | 6.0 | 14.1% | 9 | 8 |
| 7.2 | 53 | 5.6 | 17.5% | 6 | 4 |
| 7.1 | 28 | 4.9 | 14.2% | 3 | 3 |
| 6.7 | 20 | 7.4 | 36.1% | 9 | 6 |
| 6.6 | 17 | 6.4 | 29.1% | 5 | 4 |
| 6.5 | 54 | 7.5 | 13.9% | 4 | 5 |
| 6.4 | 48 | 7.6 | 15.4% | 10 | 7 |