G
Vendor security profile5 actively exploited CVEs
gnu
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs148
Critical3
CISA KEV5
Public exploit77
Patch rate%59
Avg. CVSS6.3
12-month vulnerability rate
8
1
1
0
7
13
2
4
10
11
16
5
CVE KEV
CVE severity distribution
148toplam CVE
Critical3 (2%)
High50 (34%)
Medium84 (57%)
Low8 (5%)
Uncertain3 (2%)
Patch and exploitation view
%59
Verified patch
%3
CISA KEV
%52
Public exploit
85Patch available
2Partial
3Workaround
0Vendor: no patch
58Unknown
Latest vulnerabilities
7.8
CVE-2026-108976
Vulnerability in GNU Emacs
G
Patch verified
1.8
CVE-2026-75820
Integer Truncation Leading to Heap Corruption in GNU Aspell
G
Patch status unknownEPSS %0
1.8
CVE-2026-75819
Out-of-bounds Read in GNU Aspell
G
Patch status unknownEPSS %0
1.8
CVE-2026-75818
Heap Buffer Overflow in GNU Aspell's prezip utility
G
Patch status unknownEPSS %0
3.6
CVE-2026-105712
Vulnerability in GnuPG
G
Patch status unknownEPSS %0
6.4
CVE-2026-97876
Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address
G
Patch verifiedEPSS %0
3.7
CVE-2026-97399
One-byte overread in strncasecmp on Power8
TG
Patch status unknownEPSS %0
7.3
CVE-2026-100310
GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX
G
Patch verifiedEPSS %0
7.8
CVE-2026-96442
Emacs: emacs: arbitrary code execution in flymake mode
GE
Patch status unknownEPSS %0
7.5
CVE-2026-96269
Vulnerability in GNU Emacs
G
Patch status unknownEPSS %0