D
Vendor security profile18 actively exploited CVEs
debian
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs1.273
Critical109
CISA KEV18
Public exploit209
Patch rate%89
Avg. CVSS7.6
12-month vulnerability rate
0
1
2
1
2
2
2
2
2
526
1
0
CVE KEV
CVE severity distribution
1.273toplam CVE
Critical109 (9%)
High744 (58%)
Medium194 (15%)
Low8 (1%)
Uncertain218 (17%)
Patch and exploitation view
%89
Verified patch
%1
CISA KEV
%16
Public exploit
785Patch available
347Partial
4Workaround
0Vendor: no patch
137Unknown
Latest vulnerabilities
4.1
CVE-2026-89169
Vulnerability in Debian Live Boot
D
Patch status unknownEPSS %0
6.9
CVE-2026-82398
pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace
P
Partial patchEPSS %1
7.5
CVE-2026-82397
Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop
T
Patch status unknownEPSS %0
5.3
CVE-2026-82821
FLVMeta AMF Object Parsing amf.c amf_object_get null pointer dereference
N
Partial patchEPSS %1
5.3
CVE-2026-82820
FLVMeta AMF String Processing amf.c amf_string_new heap-based overflow
N
Partial patchEPSS %1
6.5
CVE-2026-19953
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep
C
Partial patchEPSS %0
7.3
CVE-2026-78422
zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID
Z
Partial patchEPSS %0
5.5
CVE-2026-82797
Vulnerability in Samsung Open Source Rlottie
SO
Patch status unknownEPSS %0
7.5
CVE-2026-19873
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements
C
Partial patchEPSS %1
4.8
CVE-2026-82677
valkey-io valkey Module Timer module.c moduleTimerHandler double free
V
Partial patchEPSS %1