PA
Product
patch
by GNU · last CVE Jul 9, 2026
15
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 7Low 0
Watch

Add patch to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-13636
5.9
4%
Jul 17
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files
Affected: through 2.7.6
CVE-2026-56289
5.5
0%
Jul 9
Loop with Unreachable Exit Condition in GNU patch
Affected: through 2.8.0
CVE-2026-56288
5.5
0%
Jul 9
NULL Pointer Dereference in GNU patch
Affected: through 2.8.0
CVE-2021-45261
5.5
1%
Dec 22
An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service
Affected: 2.7
CVE-2019-20633
5.5
1%
Mar 25
GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file
Affected: through 2.7.6
CVE-2016-10713
5.5
2%
Feb 13
An issue was discovered in GNU patch before 2.7.6
Affected: before 2.7.6
CVE-2014-9637
5.5
2%
Aug 25
GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory consumption and segmentation fault) via a crafted diff file
Affected: through 2.7.2
Showing 7