Skip to content

Linux · weakness class

Command and Code Injection

7 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of…CVE-2008-1926Linux · 3.9% likely

    CWE-94

  2. The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privi…CVE-2008-0600Linux · 3.8% likely

    CWE-94

  3. BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This a…CVE-2021-29154Linux · 0.9% likely

    CWE-77

  4. The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not prop…CVE-2010-2240Linux · 0.7% likely

    CWE-94

  5. Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race…CVE-2008-1669Linux · 0.4% likely

    CWE-94

  6. A flaw was found in the Linux kernel in versions prior to 5.10. A violation of memory access was found while detecting a padding of int3 in the linking state. The highest threat f…CVE-2021-3411Linux · 0.4% likely

    CWE-94

  7. drm/amd/display: Wake DMCUB before executing GPINT commandsCVE-2023-52624Linux · 0.4% likely

    CWE-77

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.