Gnu vulnerabilities

Products

• Binutils 288
• Glibc 163
• Libredwg 101
• Gnutls 74
• Grub2 54
• Mailman 47
• Emacs 42
• Wget 27
• Tar 20
• Bash 18
• Pspp 18
• Cpio 15
• Libextractor 15
• Patch 15
• Gcc 14
• Recutils 14
• Gzip 13
• Libtasn1 13
• Coreutils 12
• Groff 10
• Libiberty 10
• Privacy Guard 10
• Gdb 9
• Screen 9
• Adns 8
• Aspell 8
• Inetutils 8
• Mailutils 8
• Gnump3d 7
• Cfengine 6
• Cflow 6
• Elfutils 6
• Guix 6
• Libidn 6
• Libmicrohttpd 6
• Radius 6
• A2ps 5
• Enscript 5
• Gawk 5
• Libcdio 5

Show 48 moreShow less

• Org Mode 5
• Osip 5
• Savane 5
• Sharutils 5
• Bison 4
• Chess 4
• Ed 4
• Fribidi 4
• Hurd 4
• Inet 4
• Libidn2 4
• Nano 4
• Sed 4
• Eglibc 3
• Fileutils 3
• Fingerd 3
• Gnash 3
• Gnats 3
• Gnubiff 3
• Sasl 3
• Less 3
• Phpbook 3
• Wget2 3
• Zebra 3
• Anubis 2
• Automake 2
• Bourne-again Shell (bash) 2
• Cvs 2
• Findutils 2
• Gettext 2
• Global 2
• Gnupg 2
• Scientific Library 2
• Screen 2
• Gpgme 2
• Grep 2
• Grub 2
• Guile 2
• Gv 2
• Indent 2
• Libgcrypt 2
• Libtool 2
• Lsh 2
• M4 2
• Ncurses 2
• Parallel 2
• Texinfo 2
• Xemacs 2

Newest

• gnu mtools GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c. CVE-2026-118384 6.1 MediumOctober 28, 2026
• gnu libredwg GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder CVE-2026-111167 6.9 MediumOctober 15, 2026
• eclipse foundation guix The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because gx_page_header_data_size is… CVE-2026-103414 8.4 HighOctober 14, 2026
• gnu aspell Important: aspell security update CVE-2026-103658 Fix available 5.9 MediumOctober 12, 2026
• gnu emacs GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename... CVE-2026-108976 Fix available 7.8 HighOctober 11, 2026
• gnu aspell Integer Truncation Leading to Heap Corruption in GNU Aspell CVE-2026-75820 Fix available 1.8 LowOctober 6, 2026
• gnu aspell Out-of-bounds Read in GNU Aspell CVE-2026-75819 Fix available 1.8 LowOctober 6, 2026
• gnu aspell Heap Buffer Overflow in GNU Aspell's prezip utility CVE-2026-75818 Fix available 1.8 LowOctober 6, 2026
• gnu grub2 Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address CVE-2026-97876 Fix available 6.4 MediumOctober 2, 2026
• eclipse foundation guix `gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it... CVE-2026-102729 5.9 MediumSeptember 29, 2026
• gnu libextractor GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX CVE-2026-100310 Fix available 7.3 HighSeptember 25, 2026
• gnu emacs GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an... CVE-2026-96269 Fix available 7.5 HighSeptember 22, 2026
• gnu wget CVE-2026-94574 CVE-2026-94574 7.8 HighSeptember 22, 2026
• gnu binutils GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference CVE-2026-91782 Fix available 4.8 MediumSeptember 15, 2026
• gnu binutils GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference CVE-2026-91781 Fix available 4.8 MediumSeptember 15, 2026
• gnu binutils GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference CVE-2026-91780 Fix available 4.8 MediumSeptember 15, 2026
• gnu binutils GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference CVE-2026-91779 Fix available 4.8 MediumSeptember 15, 2026
• gnu libextractor GNU libextractor before 1.15 Stack Overflow via OLE2 CVE-2026-91752 Fix available 8.7 HighSeptember 15, 2026
• gnu libredwg GNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference CVE-2026-90622 4.8 MediumSeptember 14, 2026
• gnu wget Denial of Service in GNU wget CVE-2026-16599 Fix available 5.1 MediumAugust 25, 2026
• gnu emacs GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader CVE-2026-77219 Fix available 6.9 MediumAugust 21, 2026
• gnu cpio Improper Output Encoding in GNU cpio CVE-2026-66486 Fix available 4.6 MediumAugust 10, 2026
• gnu cpio Uncontrolled Memory Allocation in GNU cpio CVE-2026-66485 Fix available 4.6 MediumAugust 10, 2026
• gnu cpio Path Traversal in GNU cpio CVE-2026-66484 Fix available 4.6 MediumAugust 10, 2026
• gnu emacs Heap Use of Uninitialized Memory in GNU Emacs for Android CVE-2026-71394 5.3 MediumAugust 10, 2026
• gnu emacs Heap Buffer Overflow in GNU Emacs for Android CVE-2026-71393 5.3 MediumAugust 10, 2026
• gnu emacs Integer Overflow in GNU Emacs for Android CVE-2026-71392 5.3 MediumAugust 10, 2026
• gnu emacs Off-by-One Error in GNU Emacs for Android CVE-2026-71391 5.3 MediumAugust 10, 2026
• gnu tar, red hat discovery 2, enterprise linux 10 +10 more +12 more Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape CVE-2026-18477 Fix available 4.4 MediumAugust 3, 2026
• gnu tar, red hat discovery 2, enterprise linux 10 +10 more +12 more Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite CVE-2026-18508 Fix available 4.4 MediumAugust 3, 2026
• gnu binutils GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption CVE-2026-90831 Fix available 4.8 MediumJuly 29, 2026
• gnu binutils GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference CVE-2026-90830 Fix available 4.8 MediumJuly 29, 2026
• gnu binutils GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference CVE-2026-90829 Fix available 4.8 MediumJuly 29, 2026
• gnu binutils GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference CVE-2026-90828 Fix available 4.8 MediumJuly 29, 2026
• gnu binutils GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow CVE-2026-90804 Fix available 2.4 LowJuly 29, 2026
• gnu binutils GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow CVE-2026-90803 Fix available 4.8 MediumJuly 29, 2026
• gnu binutils GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference CVE-2026-90802 Fix available 4.8 MediumJuly 29, 2026
• gnu binutils GNU Binutils ld cache.c cache_bwrite buffer overflow CVE-2026-90801 Fix available 4.8 MediumJuly 29, 2026
• gnu bison Arbitrary Output Location Change in GNU Bison CVE-2026-56390 Fix available 4.6 MediumJuly 29, 2026
• gnu bison Arbitrary Command Execution in GNU Bison CVE-2026-56389 Fix available 6.8 MediumJuly 29, 2026
• gnu coreutils Heap-based Buffer Overflow in GNU coreutils CVE-2026-56392 Fix available 1.8 LowJuly 24, 2026
• gnu coreutils Out‑of‑bounds Read in GNU coreutils CVE-2026-56391 Fix available 4.6 MediumJuly 24, 2026
• gnu diffutils Heap-based Buffer Overflow in GNU diffutils CVE-2026-53910 Fix availableDisputed 2.1 LowJuly 22, 2026
• fossies gawk Stack-based buffer overflow in gawk CVE-2026-40553 Fix available 5.1 MediumJuly 13, 2026
• fossies gawk Heap buffer overflow in gawk CVE-2026-40469 Fix available 5.1 MediumJuly 13, 2026
• fossies gawk Heap buffer overflow in gawk CVE-2026-40468 Fix available 2.1 LowJuly 13, 2026
• fossies gawk Use after free in gawk CVE-2026-40467 Fix available 5.1 MediumJuly 13, 2026
• gnu libredwg GNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow CVE-2026-15520 4.8 MediumJuly 13, 2026
• gnu wget CVE-2026-15146 CVE-2026-15146 Fix available 5.9 MediumJuly 10, 2026
• gnu libredwg GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference CVE-2026-15184 Fix available 4.8 MediumJuly 9, 2026
• Show olderLoading…