Enterprise Linux For Arm64 Eus

Vendor:

First CVE: Apr 8, 2019 · Active for 7 years

38
Total CVEs
Bottom 1%
6.3
Avg CVEs / Year
Bottom 1%
7.3
Avg CVSS
Higher Avg CVSS than 80% of tracked products
13.2%
KEV Rate
Higher KEV Rate than 99% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Enterprise Linux For Arm64 Eus over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 8, 2019
7 years ago
Most Recent CVE
Feb 6, 2026
172 days ago

CVE Severity & Scoring

Enterprise Linux For Arm64 Eus38 CVEs
All CVEs353,240 CVEs
MediumHighCritical
Attack Vector
Local11 (28.9%)
Network26 (68.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network1 (2.6%)
Attack Complexity
Low31 (81.6%)
High7 (18.4%)
Unknown0 (0.0%)
User Interaction
None35 (92.1%)
Unknown0 (0.0%)
Required3 (7.9%)
Privileges Required
Low16 (42.1%)
High1 (2.6%)
None21 (55.3%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (38 CVEs).

38 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to us
Oct 3, 20237.898YESYES
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buff
Oct 28, 20199.898YESYES
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
Sep 16, 20219.097YESYES
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by
Apr 8, 20197.893YESYES
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth
Jul 1, 20248.189NOYES
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addre
Mar 6, 20238.865YESNO
A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vul
Feb 6, 20269.839NONO
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents,
Apr 3, 20257.433NONO
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparis
Jan 14, 20257.532NONO
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a ver
Nov 26, 20257.730NONO

Exploit Exposure

Signals from CVEs in this product scope (38 CVEs).

CISA KEV
5 CVEs
13.2% of CVEs· 99th percentile
Metasploit
2 CVEs
5.3% of CVEs· Bottom 1%
Nuclei
2 CVEs
5.3% of CVEs· Bottom 1%
ExploitDB
4 CVEs
10.5% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (38 CVEs).

Media Mentions

Signals from CVEs in this product scope (38 CVEs).

Top CNAs Publishing CVEs For Enterprise Linux For Arm64 Eus

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
9.6_aarch6497.312.6%11
9.4_aarch64196.911.3%12
9.2_aarch64106.89.1%11
9.246.90.4%00
9.0_aarch6425.80.7%00
9.037.40.4%00
8.8_aarch64107.318.7%22
8.857.320.3%11
8.6_aarch6497.828.9%33
8.657.820.5%21
8.4_aarch6438.457.7%22
8.2_aarch6438.457.7%22
8.1_aarch6438.457.7%22
10.0_aarch6437.92.5%00
10.017.70.3%00