Product by Debian

Systemd

21 known vulnerabilities in Systemd (Debian), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Systemd (Debian)

Medium	CVE-2018-1049	Red Hat Systemd: Race Condition also in 12 other products	5.9	16.02.2018
Medium	CVE-2021-33910	Systemd: security vulnerability also in 5 other products	5.5	20.07.2021
High	CVE-2018-16865	The systemd Project Systemd: Allocation of Resources Without Limits or Throttling also in 12 other products	7.5	11.01.2019
High	CVE-2018-15688	Out-of-Bounds write in systemd-networkd dhcpv6 option handling also in 10 other products	8.8	26.10.2018
High	CVE-2018-15686	systemd: reexec state injection: fgets() on overlong lines leads to line splitting also in 5 other products	7.0	26.10.2018
Medium	CVE-2025-4598	Systemd-coredump: Signal Handler Race Condition also in 20 other products	4.7	30.05.2025
Medium	CVE-2019-6454	Systemd: Denial of Service also in 22 other products	5.5	17.03.2019
High	CVE-2023-26604	Systemd: Privilege Escalation also in 3 other products	7.8	03.03.2023
High	CVE-2017-18078	Systemd: security vulnerability also in 3 other products	7.8	29.01.2018
Not rated	CVE-2013-4391	Systemd: Heap-Based Buffer Overflow also in 2 other products	—	28.10.2013
High	CVE-2018-16864	The systemd Project Systemd: Allocation of Resources Without Limits or Throttling also in 12 other products	7.4	11.01.2019
High	CVE-2019-3842	The systemd Project Systemd: Improper Authorization also in 5 other products	4.5	09.04.2019
Medium	CVE-2018-16866	The systemd Project Systemd: Out-of-bounds Read also in 21 other products	4.3	11.01.2019
High	CVE-2020-1712	Systemd: Use After Free also in 6 other products	7.8	31.03.2020
Medium	CVE-2026-4105	Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method also in 6 other products	6.7	13.03.2026
Medium	CVE-2026-40225	Systemd: Incorrect Resource Transfer Between Spheres also in 6 other products	6.4	10.04.2026
Medium	CVE-2026-40226	Systemd: Use of Less Trusted Source also in 3 other products	6.4	10.04.2026
Medium	CVE-2026-29111	systemd: Local unprivileged user can trigger an assert also in 6 other products	5.5	23.03.2026
Low	CVE-2019-3815	The systemd Project Systemd: Missing Release of Memory after Effective Lifetime also in 8 other products	3.3	28.01.2019
Not rated	CVE-2013-4394	Systemd: Privilege Escalation also in 2 other products	—	28.10.2013
Not rated	CVE-2013-4327	Systemd: Race Condition also in 3 other products	—	03.10.2013

All products by Debian

Key figures

Vulnerabilities