GNU

Products

Exploited and recent CVEs

• CVE-2026-24061 Critical 9.8 Exploited telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable. 99.0%
• CVE-2026-118384 Medium 6.1 GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c. 0.3%
• CVE-2026-111167 Medium 6.1 GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder 0.1%
• CVE-2026-103658 Medium 5.9 GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes it 0.2%
• CVE-2026-108976 High 7.8 GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an 0.6%
• CVE-2026-75820 Low 1.8 Integer Truncation Leading to Heap Corruption in GNU Aspell 0.1%
• CVE-2026-75819 Low 1.8 Out-of-bounds Read in GNU Aspell 0.1%
• CVE-2026-75818 Low 1.8 Heap Buffer Overflow in GNU Aspell's prezip utility 0.1%
• CVE-2026-97876 Medium 6.4 Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address 0.1%
• CVE-2026-100310 High 7.0 GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX 0.1%
• CVE-2026-96269 High 7.5 GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the defaul 0.1%
• CVE-2026-91782 Low 3.3 GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference 0.2%
• CVE-2026-91781 Low 3.3 GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference 0.2%
• CVE-2026-91780 Low 3.3 GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference 0.2%
• CVE-2026-91779 Low 3.3 GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference 0.2%
• CVE-2026-91752 High 7.5 GNU libextractor before 1.15 Stack Overflow via OLE2 0.7%
• CVE-2026-90831 Medium 5.3 GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption 0.2%
• CVE-2026-90830 Medium 5.3 GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference 0.2%
• CVE-2026-90829 Medium 5.3 GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference 0.2%
• CVE-2026-90828 Medium 5.3 GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference 0.2%
• CVE-2026-90804 Medium 4.8 GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow 0.2%
• CVE-2026-90803 Medium 5.3 GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow 0.2%
• CVE-2026-90802 Medium 4.4 GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference 0.2%
• CVE-2026-90801 Medium 5.3 GNU Binutils ld cache.c cache_bwrite buffer overflow 0.2%
• CVE-2026-90622 Low 3.3 GNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference 0.2%
• CVE-2026-16599 Medium 5.1 Denial of Service in GNU wget 0.4%
• CVE-2026-77219 High 7.1 GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader 0.1%
• CVE-2026-66486 Medium 4.6 Improper Output Encoding in GNU cpio 0.2%
• CVE-2026-66485 Medium 4.6 Uncontrolled Memory Allocation in GNU cpio 0.2%
• CVE-2026-66484 Medium 4.6 Path Traversal in GNU cpio 0.2%