CVE Tools
Track your stack

Gnu

1,098 CVEs tracked since 1999. Since Aug 2018, 1 of them reached CISA KEV.

Gnu CVEs per month

Aug 2018 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Gnu CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2018-0840
2018-0950
2018-10110
2018-11no snapshot
2018-12120
2019-01no snapshot
2019-02140
2019-03no snapshot
2019-04no snapshot
2019-0560
2019-06no snapshot
2019-07100
2019-0840
2019-0930
2019-1090
2019-11100
2019-1280
2020-01130
2020-022 or fewer
2020-0320
2020-04no snapshot
2020-05no snapshot
2020-06100
2020-07no snapshot
2020-082 or fewer
2020-091 or fewer
2020-101 or fewer
2020-111 or fewer
2020-1280
2021-0170
2021-0230
2021-03no snapshot
2021-0440
2021-05270
2021-062 or fewer
2021-0730
2021-083 or fewer
2021-0990
2021-102 or fewer
2021-1180
2021-1260
2022-0160
2022-022 or fewer
2022-0330
2022-043 or fewer
2022-053 or fewer
2022-0680
2022-0740
2022-0890
2022-0960
2022-102 or fewer
2022-113 or fewer
2022-123 or fewer
2023-0130
2023-0280
2023-03no snapshot
2023-0440
2023-053 or fewer
2023-0650
2023-0780
2023-08280
2023-09100
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-0180
2024-0240
2024-0350
2024-0460
2024-055 or fewer
2024-0640
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-02200
2025-03100
2025-0440
2025-0590
2025-0650
2025-0780
2025-084 or fewer
2025-0940
2025-1070
2025-1180
2025-1270
2026-0171
2026-025 or fewer
2026-03160
2026-04160
2026-05110
2026-0680
2026-07180
2026-08110
2026-09160
2026-1011 or fewer
2026-110

Products

The products that kept showing up in Gnu's monthly top three, with their CVEs summed over those months.

  1. Binutils13026 months
  2. Libredwg7211 months
  3. Glibc4719 months
  4. GRUB2299 months
  5. Gnutls199 months
  6. Emacs134 months
  7. Pspp114 months
  8. Ncurses104 months
  9. Recutils83 months
  10. Adns71 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Gnu.

  1. CVE-2026-118384GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.6.1
  2. CVE-2026-111167GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder6.1
  3. CVE-2026-103658GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes...5.9
  4. CVE-2026-108976GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of ...7.8
  5. CVE-2026-75820Integer Truncation Leading to Heap Corruption in GNU Aspell—
  6. CVE-2026-75819Out-of-bounds Read in GNU Aspell—
  7. CVE-2026-75818Heap Buffer Overflow in GNU Aspell's prezip utility—
  8. CVE-2026-97876Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address6.4
  9. CVE-2026-100310GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX7.0
  10. CVE-2026-96269GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the def...—
  11. CVE-2026-91782GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference3.3
  12. CVE-2026-91781GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference3.3
  13. CVE-2026-91780GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference3.3
  14. CVE-2026-91779GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference3.3
  15. CVE-2026-91752GNU libextractor before 1.15 Stack Overflow via OLE27.5

The record

Peak rank
#4 in Dec 2003
Busiest month shown
Aug 2023, 28 CVEs
Months with a KEV entry
1 since Aug 2018
Monthly snapshots
211 since 1999
Gnu's full record, month by month