Known vulnerabilities in Gentoo Linux

Vendor: Gentoo
Software: Gentoo Linux
Software CPE: cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 8891
Public exploits: 606
Known exploited (KEV): 158
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Gentoo Linux Gentoo Linux is affected by 8891 known vulnerabilities: 126 critical, 2743 high, 3376 medium, 2646 low Critical High Medium Low

Vulnerabilities (8891)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131454 - Missing Authorization
CVE-2026-6472		 CWE-862 Low
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 27 more
#VU131455 - Integer overflow
CVE-2026-6473		 CWE-190 Low
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 55 more
#VU131456 - Use of Externally-Controlled Format String
CVE-2026-6474		 CWE-134 Low
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 26 more
#VU131457 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-6475		 CWE-59 Medium
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 43 more
#VU131458 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-6476		 CWE-89 Low
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB2026051852
and 7 more
#VU122780 - Heap-based Buffer Overflow
CVE-2026-2007		 CWE-122 Medium
No
No
 - 12.02.2026 SB2026021258
SB2026022046
SB2026022047
and 2 more
#VU122779 - Memory corruption
CVE-2026-2006		 CWE-119 Medium
No
No
 - 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 69 more
#VU122778 - Heap-based Buffer Overflow
CVE-2026-2005		 CWE-122 Medium
No
No
 - 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 60 more
#VU122777 - Type confusion
CVE-2026-2004		 CWE-843 Medium
No
No
 - 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 60 more
#VU122776 - Out-of-bounds read
CVE-2026-2003		 CWE-125 Medium
No
No
 - 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 39 more
#VU118519 - Missing Authorization
CVE-2025-12817		 CWE-862 Low
No
No
 - 13.11.2025 SB2025111368
SB2025112204
SB2025112205
and 49 more
#VU114096 - Improper input validation
CVE-2025-8715		 CWE-20 Medium
No
No
 - 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 52 more
#VU114095 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8714		 CWE-94 Low
Available
No
 - 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 60 more
#VU114094 - Permissions, Privileges, and Access Controls
CVE-2025-8713		 CWE-264 Low
No
No
 - 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 32 more
#VU108834 - Buffer over-read
CVE-2025-4207		 CWE-126 Medium
No
No
 - 09.05.2025 SB2025050920
SB2025051669
SB20250521157
and 38 more
#VU103970 - Improper input validation
CVE-2025-1094		 CWE-20 Critical
Available
Exploited
 - 14.02.2025 SB2025021408
SB2025022038
SB2025022039
and 78 more
#VU100986 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-11003		 CWE-78 Low
Available
No
 - 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 8 more
#VU100984 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-48992		 CWE-94 Low
No
No
 - 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 8 more
#VU100983 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-48991		 CWE-362 Low
Available
No
 - 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 8 more
#VU100982 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-48990		 CWE-94 Low
Available
Exploited
 - 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 8 more


Showing elements 1 - 20 out of 8891