Known vulnerabilities in Debian Linux - page 7

Vendor: Debian
Software: Debian Linux
Software CPE: cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
Total vulnerabilities: 11956
Public exploits: 380
Known exploited (KEV): 117
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Debian Linux Debian Linux is affected by 11956 known vulnerabilities: 80 critical, 3055 high, 3225 medium, 5595 low Critical High Medium Low

Vulnerabilities (11956)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151781 - Improperly Implemented Security Check for Standard
CVE-2026-95385
CWE-358 Low
No
No
- 23.09.2026 SB2026092328
SB20260925244
SB20260925245
and 5 more
#VU151755 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-95384
CWE-362 Low
No
No
- 23.09.2026 SB2026092328
SB20260925244
SB20260925245
and 5 more
#VU151727 - Improper input validation
CVE-2026-95382
CWE-20 Low
No
No
- 23.09.2026 SB2026092328
SB20260925244
SB20260925245
and 5 more
#VU151621 - Command injection
CVE-2026-42850
CWE-77 Medium
No
No
- 22.09.2026 SB2026092260
SB2026092263
#VU151620 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-42851
CWE-94 High
No
No
- 22.09.2026 SB2026092260
SB2026092263
#VU151619 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-54055
CWE-59 Medium
No
No
- 22.09.2026 SB2026092259
SB2026092263
#VU135839 - Improper Access Control
CVE-2026-61550
CWE-284 High
No
No
- 29.06.2026 SB20260629126
SB2026092264
#VU135838 - Stack-based buffer overflow
CVE-2026-61551
CWE-121 High
No
No
- 29.06.2026 SB20260629126
SB2026092264
#VU135837 - Improper input validation
CVE-2026-61552
CWE-20 Low
No
No
- 29.06.2026 SB20260629126
SB2026092264
#VU132212 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48849
CWE-79 Low
No
No
- 25.05.2026 SB2026052501
SB20260925257
#VU132213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48848
CWE-79 Medium
No
No
- 25.05.2026 SB2026052501
SB20260925257
#VU132214 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-48842
CWE-89 Critical
No
No
- 25.05.2026 SB2026052501
SB20260925257
#VU132215 - Server-Side Request Forgery (SSRF)
CVE-2026-48843
CWE-918 Medium
No
No
- 25.05.2026 SB2026052501
SB20260925257
#VU132216 - Server-Side Request Forgery (SSRF)
CVE-2026-48845
CWE-918 Medium
No
No
- 25.05.2026 SB2026052501
SB20260925257
#VU132217 - Improper input validation
CVE-2026-48846
CWE-20 Low
No
No
- 25.05.2026 SB2026052501
SB20260925257
#VU132218 - External Control of File Name or Path
CVE-2026-48847
CWE-73 Medium
No
No
- 25.05.2026 SB2026052501
SB20260925257
#VU132219 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-48844
CWE-94 Medium
No
No
- 25.05.2026 SB2026052501
SB20260925257
#VU117673 - Execution with Unnecessary Privileges
CVE-2025-61909
CWE-250 Low
No
No
- 27.10.2025 SB2025102727
SB2026092264
#VU117672 - NULL Pointer Dereference
CVE-2025-61908
CWE-476 Medium
No
No
- 27.10.2025 SB2025102727
SB2026092264
#VU117671 - Exposure of sensitive information to an unauthorized actor
CVE-2025-61907
CWE-200 Medium
No
No
- 27.10.2025 SB2025102727
SB2026092264


Showing elements 121 - 140 out of 11956