By year
99
00
01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Exploited GNU flaws
These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.
- CVE-2026-24061 GNU InetUtils Argument InjectionExploited since Jan 26, 2026 · CVSS 9.8
- CVE-2014-6278 GNU Bash OS Command InjectionExploited since Oct 2, 2025 · CVSS 8.8
- CVE-2023-4911 GNU C Library Buffer OverflowExploited since Nov 21, 2023 · CVSS 7.8
- CVE-2014-7169 GNU Bourne-Again Shell (Bash) Arbitrary Code ExecutionExploited since Jan 28, 2022 · CVSS 9.8
- CVE-2014-6271 GNU Bourne-Again Shell (Bash) Arbitrary Code ExecutionExploited since Jan 28, 2022 · CVSS 9.8
Latest high and critical flaws
- CVE-2026-108976 GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputsHigh 7.8 · Oct 11, 2026
- CVE-2026-100310 GNU libextractor before 1.16 loads plugins from an untrusted search path specified by the LIBEXTRACTOR_PREFIX environment variable without proper privilege checHigh 7.3 · Sep 25, 2026
- CVE-2026-96269 GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and uniHigh 7.5 · Sep 22, 2026
- CVE-2026-91752 GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array fHigh 8.7 · Sep 14, 2026
- CVE-2026-48829 In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character.High 7.5 · May 24, 2026
- CVE-2025-69720 The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.High 7.3 · Mar 19, 2026
- CVE-2026-32746 telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check wCritical 9.8 · Mar 13, 2026
- CVE-2025-69650 GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data.High 7.5 · Mar 6, 2026
- CVE-2025-69649 GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields.High 7.5 · Mar 6, 2026
- CVE-2026-28372 telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implHigh 7.4 · Feb 27, 2026
- CVE-2026-24061 GNU InetUtils Argument InjectionExploited · Critical 9.8 · Jan 21, 2026
- CVE-2025-69195 A flaw was found in GNU Wget2.High 7.6 · Jan 9, 2026
- CVE-2025-69194 A security issue was discovered in GNU Wget2 when handling Metalink documents.High 8.8 · Jan 9, 2026
- CVE-2025-65409 A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service (DoS) via inputting an empty value as High 7.5 · Dec 30, 2025
- CVE-2025-66866 An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.High 7.5 · Dec 29, 2025
- CVE-2025-66865 An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.High 7.5 · Dec 29, 2025
- CVE-2025-66864 An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.High 7.5 · Dec 29, 2025
- CVE-2025-66863 An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.High 7.5 · Dec 29, 2025
- CVE-2025-66862 A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.High 7.5 · Dec 29, 2025
- CVE-2025-61662 A Use-After-Free vulnerability has been discovered in GRUB's gettext module.High 7.8 · Nov 18, 2025
- CVE-2024-56737 GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.High 8.8 · Dec 29, 2024
- CVE-2024-53920 In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can High 7.8 · Nov 27, 2024
- CVE-2024-52867 guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users before file metadata concerns (e.g., for High 8.1 · Nov 16, 2024
- CVE-2024-39331 In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-striCritical 9.8 · Jun 23, 2024
- CVE-2024-38448 htags in GNU Global through 6.6.12 allows code execution in situations where dbpath (aka -d) is untrusted, because shell metacharacters may be used.Critical 9.1 · Jun 16, 2024
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.