CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
Linux has 21,260 CVEs, 29 exploited. Pick a weakness or a product to list them.
By weakness
- Memory Corruption6,959 · 16 exploited
- Denial of Service1,985
- Race Conditions1,334 · 4 exploited
- Input Validation and Logic370 · 3 exploited
- Access Control261 · 2 exploited
- Information Disclosure235
- Other weaknesses113 · 1 exploited
- Cryptography34
- Misconfiguration and Insecure Design14
- Authentication10 · 1 exploited
- File and Path Handling10
- Command and Code Injection7
- Injection and Smuggling5
- Deserialization and Object Injection1
- Server-Side Request Forgery1
- No weakness recorded9,921 · 2 exploited
By product
- Linux18,254 · 12 exploited
- Linux Kernel2,526 · 2 exploited
- kernel396 · 15 exploited
- Acrn7
- Tizen7
- Util-Linux5
- Linux kernel through version 4.154
- Android Kernel-3.103
- Android Kernel-3.10 Kernel-3.183
- Android Kernel-3.182
- BlueZ2
- Direct Connect2
- Audit1
- Ipsec Tools Racoon Daemon1
- Kernel:KVM1
- kernel since v3.1-rc1 through v4.131
- KVM1
- Linus kernel1
- Linux Kernal1
- Linux kernel 4.111
- Linux kernel 4.15.0-rc91
- Linux kernel before 4.10.131
- Linux kernel before 4.12.31
- Linux kernel before 4.131
- Linux kernel before 4.13.121
- Linux Kernel before 4.13.61
- Linux kernel before 4.14-rc61
- Linux kernel before 4.6.21
- Linux kernel before 4.91
- Linux kernel ext4 filesystem1
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-14.