Linux Enterprise Workstation Extension

Vendor:

First CVE: Apr 14, 2014 · Active for 12 years

105
Total CVEs
More Total CVEs than 99% of tracked products
13.1
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 43% of tracked products
13.3%
KEV Rate
Higher KEV Rate than 99% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Linux Enterprise Workstation Extension over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 14, 2014
12 years ago
Most Recent CVE
Apr 22, 2026
97 days ago

CVE Severity & Scoring

Linux Enterprise Workstation Extension105 CVEs
All CVEs353,240 CVEs
LowMediumHighCritical
Attack Vector
Local16 (15.2%)
Network50 (47.6%)
Unknown38 (36.2%)
Physical1 (1.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low65 (61.9%)
High2 (1.9%)
Unknown38 (36.2%)
User Interaction
None26 (24.8%)
Unknown38 (36.2%)
Required41 (39.0%)
Privileges Required
Low5 (4.8%)
High3 (2.9%)
None59 (56.2%)
Unknown38 (36.2%)

Top CVEs

Signals from CVEs in this product scope (105 CVEs).

105 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-31431HIGH
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the c
Apr 22, 20267.899YESYES
CVE-2021-4034HIGH
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as pri
Jan 28, 20227.898YESYES
CVE-2016-4117CRITICAL
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
May 11, 20169.898YESYES
CVE-2015-5122CRITICAL
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 1
Jul 14, 20159.898YESYES
CVE-2015-5119CRITICAL
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows
Jul 8, 20159.898YESYES
CVE-2015-3113CRITICAL
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attack
Jun 23, 20159.898YESYES
CVE-2015-0313CRITICAL
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote atta
Feb 2, 20159.898YESYES
CVE-2015-0311CRITICAL
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote a
Jan 23, 20159.897YESYES
CVE-2016-3718MEDIUM
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted ima
May 5, 20165.593YESYES
CVE-2016-3715MEDIUM
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
May 5, 20165.593YESYES
View all 105 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (105 CVEs).

CISA KEV
14 CVEs
13.3% of CVEs· 99th percentile
Metasploit
8 CVEs
7.6% of CVEs· 97th percentile
Nuclei
1 CVE
1.0% of CVEs· 96th percentile
ExploitDB
15 CVEs
14.3% of CVEs· 87th percentile

Social Chatter

Signals from CVEs in this product scope (105 CVEs).

Media Mentions

Signals from CVEs in this product scope (105 CVEs).

Top CNAs Publishing CVEs For Linux Enterprise Workstation Extension

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
1517.894.5%11
121047.315.7%1315