Misconfiguration and Insecure Design

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. The Distributed Lock Manager (DLM) in the cluster manager for Linux kernel 2.6.15 allows remote attackers to cause a denial of service (loss of lock services) by connecting to the…CVE-2007-3380Linux · 3.5% likely

   CWE-16

2. The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS user…CVE-2010-0309Linux · 2.8% likely

   CWE-16

3. The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.CVE-1999-0656Linux · 1.6% likely

   CWE-16

4. The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call…CVE-2012-0957Linux · 1.0% likely

   CWE-16

5. The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing…CVE-2009-1895Linux · 0.4% likely

   CWE-16

6. nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as dem…CVE-2009-1072Linux · 0.4% likely

   CWE-16

7. cifs: Fix the smbd_response slab to allow usercopyCVE-2025-38523Linux · CVSS 7.5 · 0.4% likely

   CWE-1188

8. A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.CVE-2022-4662Linux · CVSS 5.5 · 0.4% likely

   CWE-455

9. Speculative execution attacks in KVM VMXCVE-2022-2196Linux · CVSS 5.8 · 0.4% likely

   CWE-1188

10. The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when co…CVE-2009-1184Linux · 0.3% likely

    CWE-16

11. In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and arch/x86/mm/mem_encrypt_am…CVE-2024-25744Linux · CVSS 8.8 · 0.3% likely

    CWE-693

12. dm btree remove: assign new_root only when removal succeedsCVE-2021-47343Linux · CVSS 7.8 · 0.3% likely

    CWE-1188

13. Drivers: hv: vmbus: Fix initialization of device object in vmbus_device_register()CVE-2022-49099Linux · 0.2% likely

    CWE-1188

14. crypto: qat - remove unused character device and IOCTLsCVE-2026-64529Linux · CVSS 7.8 · 0.2% likely

    CWE-489

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.