Linux Enterprise Desktop

Vendor:

First CVE: Dec 20, 2006 · Active for 19 years

466
Total CVEs
More Total CVEs than 100% of tracked products
24.5
Avg CVEs / Year
Higher CVE frequency than 99% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 39% of tracked products
7.7%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Linux Enterprise Desktop over time

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 20, 2006
19 years ago
Most Recent CVE
Apr 22, 2026
93 days ago

CVE Severity & Scoring

Linux Enterprise Desktop466 CVEs
All CVEs352,294 CVEs
LowMediumHighCritical
Attack Vector
Local53 (11.4%)
Network96 (20.6%)
Unknown305 (65.5%)
Physical1 (0.2%)
Adjacent Network11 (2.4%)
Attack Complexity
Low139 (29.8%)
High22 (4.7%)
Unknown305 (65.5%)
User Interaction
None94 (20.2%)
Unknown305 (65.5%)
Required67 (14.4%)
Privileges Required
Low31 (6.7%)
High3 (0.6%)
None127 (27.3%)
Unknown305 (65.5%)

Top CVEs

Signals from CVEs in this product scope (466 CVEs).

466 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-31431HIGH
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the c
Apr 22, 20267.899YESYES
CVE-2014-6271CRITICAL
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra
Sep 24, 20149.899YESYES
CVE-2021-4034HIGH
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as pri
Jan 28, 20227.898YESYES
CVE-2016-4117CRITICAL
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
May 11, 20169.898YESYES
CVE-2015-5122CRITICAL
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 1
Jul 14, 20159.898YESYES
CVE-2015-5119CRITICAL
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows
Jul 8, 20159.898YESYES
CVE-2015-3113CRITICAL
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attack
Jun 23, 20159.898YESYES
CVE-2015-0313CRITICAL
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote atta
Feb 2, 20159.898YESYES
CVE-2014-7169CRITICAL
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wri
Sep 25, 20149.898YESYES
CVE-2014-0497CRITICAL
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote atta
Feb 5, 20149.898YESYES
View all 466 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (466 CVEs).

CISA KEV
36 CVEs
7.7% of CVEs· 97th percentile
Metasploit
28 CVEs
6.0% of CVEs· 97th percentile
Nuclei
4 CVEs
0.9% of CVEs· 96th percentile
ExploitDB
57 CVEs
12.2% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (466 CVEs).

Media Mentions

Signals from CVEs in this product scope (466 CVEs).

Top CNAs Publishing CVEs For Linux Enterprise Desktop

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
937.117.1%00
1557.866.7%33
12.019.850.0%00
121717.215.1%1820
11.047.632.6%01
112797.213.0%2539
10.013.30.4%00
101767.69.7%1121