Linux Enterprise Server
Vendor:
First CVE: Mar 6, 2007 · Active for 19 years
500
Total CVEs
More Total CVEs than 100% of tracked products
26.3
Avg CVEs / Year
Higher CVE frequency than 99% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 29% of tracked products
3.6%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Linux Enterprise Server over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 6, 2007
19 years ago
Most Recent CVE
Apr 22, 2026
93 days ago
CVE Severity & Scoring
Linux Enterprise Server500 CVEs
11%
44%
38%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local76 (15.2%)
Network90 (18.0%)
Unknown320 (64.0%)
Physical3 (0.6%)
Adjacent Network11 (2.2%)
Attack Complexity
Low153 (30.6%)
High27 (5.4%)
Unknown320 (64.0%)
User Interaction
None149 (29.8%)
Unknown320 (64.0%)
Required31 (6.2%)
Privileges Required
Low59 (11.8%)
High3 (0.6%)
None118 (23.6%)
Unknown320 (64.0%)
Top CVEs
Signals from CVEs in this product scope (500 CVEs).
500 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-31431HIGH In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the c | Apr 22, 2026 | 7.8 | 99 | YES | YES |
CVE-2014-6271CRITICAL GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra | Sep 24, 2014 | 9.8 | 99 | YES | YES |
CVE-2012-1823CRITICAL sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) | May 11, 2012 | 9.8 | 99 | YES | YES |
CVE-2021-4034HIGH A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as pri | Jan 28, 2022 | 7.8 | 98 | YES | YES |
CVE-2014-7169CRITICAL GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wri | Sep 25, 2014 | 9.8 | 98 | YES | YES |
CVE-2013-2465CRITICAL Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and Ope | Jun 18, 2013 | 9.8 | 98 | YES | YES |
CVE-2012-0507CRITICAL Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows re | Jun 7, 2012 | 9.8 | 98 | YES | YES |
CVE-2011-3544CRITICAL Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications | Oct 19, 2011 | 9.8 | 98 | YES | YES |
CVE-2015-4495HIGH The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitr | Aug 8, 2015 | 8.8 | 96 | YES | YES |
CVE-2013-1690HIGH Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in c | Jun 26, 2013 | 8.8 | 96 | YES | YES |
Exploit Exposure
Signals from CVEs in this product scope (500 CVEs).
CISA KEV
18 CVEs
3.6% of CVEs· 97th percentile
Metasploit
20 CVEs
4.0% of CVEs· 96th percentile
Nuclei
5 CVEs
1.0% of CVEs· 96th percentile
ExploitDB
51 CVEs
10.2% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (500 CVEs).
Media Mentions
Signals from CVEs in this product scope (500 CVEs).
Top CNAs Publishing CVEs For Linux Enterprise Server
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9 | 42 | 5.7 | 11.1% | 0 | 12 |
| 8 | 3 | 8.2 | 7.6% | 0 | 1 |
| 16.1 | 1 | 7.8 | 96.3% | 1 | 1 |
| 16.0 | 1 | 7.8 | 96.3% | 1 | 1 |
| 15 | 15 | 7.7 | 51.5% | 3 | 2 |
| 12.0 | 2 | 9.8 | 34.4% | 0 | 0 |
| 12 | 147 | 6.6 | 16.1% | 10 | 10 |
| 11.0 | 10 | 6.4 | 24.3% | 0 | 2 |
| 11 | 334 | 6.9 | 12.7% | 15 | 39 |
| 10 | 198 | 7.0 | 14.9% | 9 | 30 |