Vendor
GNU
1,256 known vulnerabilities in products by GNU, 5 of them actively exploited (CISA KEV).
Key figures
1,256
Vulnerabilities
5
Actively exploited (KEV)
0
Used by ransomware
76
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2026-24061 | GNU InetUtils Argument Injection Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2014-6278 | GNU Bash OS Command Injection Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2023-4911 | Glibc: buffer overflow in ld.so leading to privilege escalation In CISA KEV | 7.8 | |
| Critical | CVE-2009-3555 | OpenSSL: security vulnerability | 9.8 | |
| Critical | CVE-2017-5334 | GnuTLS: Double Free | 9.8 | |
| High | CVE-2017-13089 | GNU Wget: stack overflow in HTTP protocol handling | 8.8 | |
| High | CVE-2016-4971 | GNU Wget: security vulnerability | 8.8 | |
| Critical | CVE-2026-32746 | GNU Inetutils: Classic Buffer Overflow | 9.8 | |
| Critical | CVE-2021-26937 | GNU Screen: Denial of Service | 9.8 | |
| High | CVE-2017-13090 | GNU Wget: heap overflow in HTTP protocol handling | 8.8 | |
| Critical | CVE-2021-3466 | Libmicrohttpd: Classic Buffer Overflow | 9.8 | |
| High | CVE-2024-2961 | The GNU C Library Glibc: Out-of-bounds Write | 7.3 | |
| High | CVE-2015-7547 | GNU glibc: Stack-Based Buffer Overflow | 8.1 | |
| Critical | CVE-2017-5336 | GnuTLS: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2018-11236 | GNU glibc: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2015-8779 | GNU glibc: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2017-5337 | GnuTLS: Heap-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2019-5953 | The GNU Projec GNU Wget: Buffer Overflow | 9.8 | |
| Critical | CVE-2015-8778 | GNU glibc: Out-of-Bounds Access | 9.8 | |
| Critical | CVE-2014-5044 | GNU Libgfortran: Integer Overflow | 9.8 | |
| Critical | CVE-2014-9761 | GNU glibc: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2022-23218 | GNU glibc: Buffer Overflow | 9.8 | |
| Critical | CVE-2022-23219 | GNU glibc: Buffer Overflow | 9.8 |
News
Products
| Product | CVEs | Actively exploited |
|---|---|---|
| GNU Binutils | 288 | 0 |
| GNU glibc | 163 | 1 |
| GNU LibreDWG | 101 | 0 |
| GnuTLS | 74 | 0 |
| GNU GRUB2 | 54 | 0 |
| GNU Mailman | 47 | 0 |
| GNU Emacs | 42 | 0 |
| GNU Wget | 25 | 0 |
| GNU Tar | 20 | 0 |
| GNU Bourne-Again SHellbash (GNU Bash) | 18 | 3 |
| GNU PSPP | 18 | 0 |
| Debian cpio | 15 | 0 |
| GNU Patch | 15 | 0 |
| Libextractor | 15 | 0 |
| GNU GCC | 14 | 0 |
| GNU Recutils | 14 | 0 |
| GNU Gzip | 13 | 0 |
| GNU Libtasn1 | 13 | 0 |
| GNU Coreutils | 12 | 0 |
| GNU GNU Privacy Guard | 10 | 0 |
| GNU Groff | 10 | 0 |
| GNU libiberty | 10 | 0 |
| GNU GDB (GNU Debugger) | 9 | 0 |
| GNU Screen | 9 | 0 |
| Adns | 8 | 0 |
| GNU Aspell | 8 | 0 |
| GNU Inetutils | 8 | 1 |
| GNU Mailutils | 8 | 0 |
| GNU GNUMP3D | 7 | 0 |
| Cflow | 6 | 0 |
| Elfutils | 6 | 0 |
| GNU Cfengine 1.5.3_4 | 6 | 0 |
| GNU libbmicrohttpd | 6 | 0 |
| GNU Radius | 6 | 0 |
| Libidn | 6 | 0 |
| Gawk | 5 | 0 |
| GNU a2ps | 5 | 0 |
| GNU Enscript 1.6.1 beta | 5 | 0 |
| GNU Savane | 5 | 0 |
| GNU Sharutils | 5 | 0 |
| Libcdio | 5 | 0 |
| Org Mode | 5 | 0 |
| Osip | 5 | 0 |
| Fribidi | 4 | 0 |
| GNU Bison | 4 | 0 |
| GNU Chess | 4 | 0 |
| GNU Ed | 4 | 0 |
| GNU inet | 4 | 0 |
| GNU libidn2 | 4 | 0 |
| GNU Nano | 4 | 0 |
| Gnu Sasl | 4 | 0 |
| GNU Sed | 4 | 0 |
| Hurd | 4 | 0 |
| Eglibc | 3 | 0 |
| GNU Fileutils | 3 | 0 |
| GNU Fingerd | 3 | 0 |
| GNU Gnash | 3 | 0 |
| GNU GNATS | 3 | 0 |
| GNU gnubiff | 3 | 0 |
| GNU Guix | 3 | 0 |