Gnu Project vulnerabilities

Products

• Grub 4
• Libbmicrohttpd 2
• Wget 2

Newest

• gnu project unrtf UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by... CVE-2026-109831 Fix available 5.1 MediumOctober 20, 2026
• gnu libmicrohttpd, gnu project libbmicrohttpd +1 more NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The... CVE-2025-62689 Fix available 8.7 HighNovember 10, 2025
• gnu libmicrohttpd, gnu project libbmicrohttpd +1 more NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The... CVE-2025-59777 Fix available 8.7 HighNovember 10, 2025
• gnu grub2, gnu project grub +1 more There's a use-after-free vulnerability in grub_cmd_chainloader() function CVE-2022-28736 Fix available 6.4 MediumJune 10, 2022
• gnu grub2, gnu project grub +1 more The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot... CVE-2022-28735 Fix available 6.7 MediumJune 10, 2022
• gnu grub2, gnu project grub, netapp active iq unified manager +2 more Out-of-bounds write when handling split HTTP headers CVE-2022-28734 Fix available 8.1 HighJune 10, 2022
• gnu project grub, gnu grub2 +1 more Integer underflow in grub_net_recv_ip4_packets CVE-2022-28733 Fix available 8.1 HighJune 10, 2022
• gnu wget, debian linux +1 more GNU Wget: heap overflow in HTTP protocol handling CVE-2017-13090 Fix available EPSS 36.6% 8.8 HighOctober 26, 2017
• gnu wget, debian linux +1 more GNU Wget: stack overflow in HTTP protocol handling CVE-2017-13089 Public exploitFix available EPSS 79.9% 8.8 HighOctober 26, 2017