D
Vendor security profile18 actively exploited CVEs
debian
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs1.289
Critical109
CISA KEV18
Public exploit218
Patch rate%88
Avg. CVSS7.6
12-month vulnerability rate
0
1
2
1
2
2
2
2
2
526
1
10
CVE KEV
CVE severity distribution
1.289toplam CVE
Critical109 (8%)
High750 (58%)
Medium201 (16%)
Low10 (1%)
Uncertain219 (17%)
Patch and exploitation view
%88
Verified patch
%1
CISA KEV
%17
Public exploit
790Patch available
349Partial
4Workaround
0Vendor: no patch
146Unknown
Latest vulnerabilities
-
CVE-2026-98385
sched/cache: Decouple sched_cache_group from mm to fix UAF
L
Patch verifiedEPSS %0
7.1
CVE-2026-108985
Out-of-bounds write in Sahlberg Libnfs
S
Partial patchEPSS %0
3.6
CVE-2026-108981
Vulnerability in Denji Ngx Cache Purge
D
Partial patchEPSS %0
5.5
CVE-2026-108978
Vulnerability in Samsung Opensource Rlottie
SO
Patch status unknownEPSS %0
7.8
CVE-2026-108976
Vulnerability in GNU Emacs
G
Patch verifiedEPSS %1
5.3
CVE-2026-108577
Konstanty Bialkowski libmodplug ABC Music Format load_abc.cpp abc_add_gchord resource consumption
KB
Patch status unknownEPSS %0
2.3
CVE-2026-108752
JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen
J
Patch status unknownEPSS %0
5.3
CVE-2026-108735
Miniflux 2.3.0 through 2.3.3 SSRF via Per-Feed Proxy URL
M
Patch status unknownEPSS %0
5.1
CVE-2026-108573
Open Asset Import Library Assimp PLY File getNextBlock out-of-bounds
OA
Patch status unknownEPSS %0
7.3
CVE-2026-108693
ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate
I
Patch status unknownEPSS %0