g
gnu
Security Risk Profile
33
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 26, 2018 to present
1000
Total CVEs
329
Critical+High
6
Exploited
117
Unpatched
Threat Assessment
Avg CVSS
6
Base severity
Avg EPSS
2%
Exploit probability
Unpatched
117
Critical/High
Risk Level
33/100
low
⚠️ 6 Active Exploits⚡ 3 Zero-Days🆕 2Fresh (<7d)📈 13 in Last 30 Days
Severity Distribution
Critical
50High
279Medium
388Low
98Exploit Likelihood
>50% chance
220-50%
05-20%
0<5%
107Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
227
2
Null Pointer Dereference
74
3
Integer Overflow
56
4
Use After Free
44
5
Input Validation
22
Most Affected Products
1. GNU binutils238
2. redhat Enterprise Linux209
3. debian/grub2163
4. debian/binutils153
5. Fedoraproject Fedora142
Recent Vulnerabilities
See more →CVE-2026-125709
CVSS 4.2medium
Libstdc++: overflow leaves streambuf in inconsistent state on i/o error.
Nov 10, 2026🔧 No Patch
REDHAT-BUG-2567333
CVSS 4.0medium
Nov 5, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q4/517
unknown
The GNU C Library security advisories update for 2026-11-04
Nov 4, 2026🔧 No Patch
REDHAT-BUG-2565676
CVSS 7.0high
Nov 3, 2026🔧 No Patch
REDHAT-BUG-2565677
CVSS 7.0high
Nov 3, 2026🔧 No Patch
REDHAT-BUG-2565679
CVSS 7.0high
Nov 3, 2026🔧 No Patch
CVE-2026-118384
CVSS 6.1medium
Fwd: GNU mtools 4.0.50 released, fixes CVE-2026-118384
Oct 28, 2026
https://seclists.org/oss-sec/2026/q4/391
unknown
GNU patch 2.8.1 leased, fixes CVE-2026-115207
Oct 26, 2026🔧 No Patch
REDHAT-BUG-2558775
CVSS 4.0medium
Oct 22, 2026🔧 No Patch
CVE-2026-115207
CVSS 5.5medium
Patch: filename validation bypass in reversal fallback allows file creation outside the working directory
Oct 22, 2026
Monitor gnu in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.