libsolv
Security Risk Profile
34
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 21, 2026 to present
6
Total CVEs
2
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
34/100
low
Severity Distribution
Critical
0High
2Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
6
2
Input Validation
4
Most Affected Products
1. redhat Enterprise Linux12
2. libsolv libsolv6
3. Microsoft azl3 libsolv 0.7.28-34
4. Microsoft azl3 libsolv 0.7.28-43
5. openSUSE libsolv3
Recent Vulnerabilities
See more →CVE-2026-48863
CVSS 7.5high
Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
4/23/2026
CVE-2026-48864
CVSS 7.8high
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
4/21/2026🔧 No Patch
REDHAT-BUG-2460425
CVSS 4.0medium
4/21/2026🔧 No Patch
CVE-2026-9149
CVSS 6.5EPSS 0%medium
Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
4/21/2026
REDHAT-BUG-2460380
CVSS 4.0medium
4/21/2026🔧 No Patch
CVE-2026-9150
CVSS 6.5EPSS 0%medium
Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums
4/21/2026
Monitor libsolv in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.