Skip to content
Noroxi

Linux records

19,789 published records for vendor Linux. 92 of them have been exploited in the wild (listed in CISA KEV) and 147 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
92 · 0.5%
Weaponized
147 · 0.7%
Pre-auth RCE
1,208
With a fix record
86.2%
Median publish → KEV
1573 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

10,000+ records
  • CVE-2022-22954
    99Now

    VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    vmware · identity managerApr 11, 2022

  • CVE-2022-47986
    99Now

    IBM Aspera Faspex code execution

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    ibm · aspera faspexFeb 17, 2023

  • CVE-2014-0497
    99Now

    Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 1

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    adobe · flash playerFeb 5, 2014

  • CVE-2015-3113
    99Now

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    adobe · flash playerJun 23, 2015

  • CVE-2015-5119
    99Now

    Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296

    CriticalCVSS 9.8KEVWeaponizedEPSS 98%

    adobe · flash playerJul 8, 2015

  • CVE-2015-0313
    98Now

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before

    CriticalCVSS 9.8KEVWeaponizedEPSS 95%

    adobe · flash playerFeb 2, 2015

  • CVE-2025-34028
    96Now

    Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal

    CriticalCVSS 9.3KEVWeaponizedEPSS 97%

    commvault · commvaultApr 22, 2025

  • CVE-2011-0611
    95Now

    Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.

    HighCVSS 8.8KEVWeaponizedEPSS 99%

    adobe · flash playerApr 13, 2011

  • CVE-2015-5122
    95Now

    Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0

    CriticalCVSS 9.8KEVWeaponizedEPSS 87%

    adobe · flash playerJul 14, 2015

  • CVE-2015-0311
    95Now

    Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and throu

    CriticalCVSS 9.8KEVWeaponizedEPSS 85%

    adobe · flash playerJan 23, 2015

  • CVE-2015-3043
    91Now

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows att

    CriticalCVSS 9.8KEVWeaponizedEPSS 73%

    adobe · flash playerApr 14, 2015

  • CVE-2022-30333
    90Now

    RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonst

    HighCVSS 7.5KEVWeaponizedEPSS 99%

    rarlab · unrarMay 9, 2022

  • CVE-2026-31431
    90Now

    crypto: algif_aead - Revert to operating out-of-place

    HighCVSS 7.8KEVWeaponizedEPSS 98%

    linux · linux kernelApr 22, 2026

  • CVE-2022-0847
    89Now

    A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe

    HighCVSS 7.8KEVWeaponizedEPSS 92%

    linux · linux kernelMar 10, 2022

  • CVE-2012-0754
    89Now

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x

    HighCVSS 8.1KEVWeaponizedEPSS 91%

    adobe · flash playerFeb 16, 2012

  • CVE-2018-4878
    88Now

    A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161.

    HighCVSS 7.8KEVWeaponizedEPSS 90%

    adobe · flash playerFeb 6, 2018

  • CVE-2018-15982
    88Now

    Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability.

    HighCVSS 7.8KEVWeaponizedEPSS 89%

    adobe · flash playerJan 18, 2019

  • CVE-2013-0640
    87Now

    Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or c

    HighCVSS 7.8KEVWeaponizedEPSS 86%

    adobe · acrobatFeb 13, 2013

  • CVE-2021-22555
    85Now

    Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

    HighCVSS 7.8KEVWeaponizedEPSS 78%

    linux · linux kernelJul 7, 2021

  • CVE-2015-8651
    85Now

    Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on

    HighCVSS 8.8KEVWeaponizedEPSS 67%

    adobe · air sdkDec 28, 2015

  • CVE-2016-5195
    83Now

    Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect ha

    HighCVSS 7.0KEVWeaponizedEPSS 83%

    linux · linux kernelNov 10, 2016

  • CVE-2012-1535
    82Now

    Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote a

    HighCVSS 7.8KEVWeaponizedEPSS 70%

    adobe · flash playerAug 15, 2012

  • CVE-2026-102489
    82Now

    Undisclosed RCE in Zammad v6.3 and higher

    CriticalCVSS 9.4KEVWeaponizedEPSS 49%

    zammad · zammadSep 30, 2026

  • CVE-2015-7645
    81Now

    Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows rem

    HighCVSS 7.8KEVWeaponizedEPSS 65%

    adobe · flash playerOct 15, 2015

  • CVE-2016-0984
    81Now

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2

    HighCVSS 8.8KEVWeaponizedEPSS 54%

    adobe · flash playerFeb 10, 2016