Vendor
Systemd
14 known vulnerabilities in products by Systemd, 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2018-15688 | Out-of-Bounds write in systemd-networkd dhcpv6 option handling | 8.8 | |
| High | CVE-2018-15686 | systemd: reexec state injection: fgets() on overlong lines leads to line splitting | 7.0 | |
| High | CVE-2018-15687 | systemd: chown_one() can dereference symlinks | 7.8 | |
| Medium | CVE-2026-16742 | Systemd-homed: Improper Verification of Cryptographic Signature | 6.7 | |
| Medium | CVE-2026-15059 | systemd-oomd: unprivileged users can terminate arbitrary processes | 5.5 | |
| High | CVE-2026-40224 | Systemd: Incorrect Authorization | 6.7 | |
| Medium | CVE-2026-40225 | Systemd: Incorrect Resource Transfer Between Spheres | 6.4 | |
| Medium | CVE-2026-40226 | Systemd: Use of Less Trusted Source | 6.4 | |
| Medium | CVE-2026-40227 | Systemd: Comparison Using Wrong Factors | 6.2 | |
| Medium | CVE-2026-15060 | systemd-machined: unprivileged users can terminate arbitrary processes | 4.7 | |
| Medium | CVE-2026-29111 | systemd: Local unprivileged user can trigger an assert | 5.5 | |
| Medium | CVE-2026-40223 | Systemd: Incorrect Behavior Order | 4.7 | |
| Medium | CVE-2012-1101 | Systemd: Denial of Service | 5.5 | |
| Low | CVE-2026-40228 | Systemd: Incorrect Resource Transfer Between Spheres | 2.9 |
Products
| Systemd | 11 | 0 |