EL
Product
Enterprise Linux Desktop
On CISA KEVExploited in the wildRansomware-linked
1,925
CVEs
57
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 249High 247Medium 4Low 0
Watch
Add Enterprise Linux Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-8720 In wildKEV | 8.8 | Mar 6 | WebKitGTK Memory Corruption Vulnerability Affected: 7.0 |
| CVE-2020-6418 In wildKEV | 8.8 | Feb 27 | Google Chromium V8 Type Confusion Vulnerability Affected: 6.0 |
| CVE-2019-8506 In wildKEV | 8.8 | Dec 18 | Apple Multiple Products Type Confusion Vulnerability Affected: 7.0 |
| CVE-2018-17480 In wildKEV | 8.8 | Dec 11 | Google Chromium V8 Out-of-Bounds Write Vulnerability Affected: 6.0 |
| CVE-2018-17463 In wildKEV | 8.8 | Nov 14 | Google Chromium V8 Remote Code Execution Vulnerability Affected: 6.0 |
| CVE-2018-6065 In wildKEV | 8.8 | Nov 14 | Google Chromium V8 Integer Overflow Vulnerability Affected: 6.0 |
| CVE-2017-5070 In wildKEV | 8.8 | Oct 27 | Google Chromium V8 Type Confusion Vulnerability Affected: 6.0 |
| CVE-2017-11292 In wildKEV | 8.8 | Oct 21 | Adobe Flash Player Type Confusion Vulnerability Affected: 6.0 |
| CVE-2017-5030 In wildKEV | 8.8 | Apr 24 | Google Chromium V8 Memory Corruption Vulnerability Affected: 6.0 |
| CVE-2016-5198 In wildKEV | 8.8 | Jan 19 | Google Chromium V8 Out-of-Bounds Memory Vulnerability Affected: 6.0 |
| CVE-2016-7855 In wildKEV | 8.8 | Nov 1 | Adobe Flash Player Use-After-Free Vulnerability Affected: 5.0; 6.0 |
| CVE-2016-1646 In wildKEV | 8.8 | Mar 29 | Google Chromium V8 Out-of-Bounds Read Vulnerability Affected: 6.0 |
| CVE-2015-8651 In wildKEV | 8.8 | Dec 28 | Adobe Flash Player Integer Overflow Vulnerability Affected: 5.0; 6.0 |
| CVE-2015-4495 In wildKEV | 8.8 | Aug 8 | Mozilla Firefox Security Feature Bypass Vulnerability Affected: 5.0; 6.0; 7.0 |
| CVE-2014-0502 In wildKEV | 8.8 | Feb 21 | Adobe Flash Player Double Free Vulnerablity Affected: 5.0; 6.0 |
| CVE-2013-1690 In wildKEV | 8.8 | Jun 26 | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability Affected: 5.0; 6.0 |
| CVE-2013-0648 In wildKEV | 8.8 | Feb 27 | Adobe Flash Player Code Execution Vulnerability Affected: 6.0 |
| CVE-2013-0643 In wildKEV | 8.8 | Feb 27 | Adobe Flash Player Incorrect Default Permissions Vulnerability Affected: 6.0 |
| CVE-2017-12617 In wildKEV | 8.1 | Oct 3 | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g Affected: 6.0; 7.0 |
| CVE-2017-12615 RansomwareIn wildKEV | 8.1 | Sep 19 | When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g Affected: 6.0; 7.0 |
| CVE-2024-1086 RansomwareIn wildKEV | 7.8 | Jan 31 | Use-after-free in Linux kernel's netfilter: nf_tables component Affected: 7.0 |
| CVE-2021-4034 RansomwareIn wildKEV | 7.8 | Jan 28 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Affected: 7.0 |
| CVE-2018-15982 RansomwareIn wildKEV | 7.8 | Jan 18 | Adobe Flash Player Use-After-Free Vulnerability Affected: 6.0 |
| CVE-2018-14634 In wildKEV | 7.8 | Sep 25 | Linux Kernel Integer Overflow Vulnerability Affected: 6.0; 7.0 |
| CVE-2018-5002 In wildKEV | 7.8 | Jul 9 | Adobe Flash Player Stack-based Buffer Overflow Vulnerability Affected: 6.0 |
| CVE-2018-4878 RansomwareIn wildKEV | 7.8 | Feb 6 | Adobe Flash Player Use-After-Free Vulnerability Affected: 6.0 |
| CVE-2017-8291 In wildKEV | 7.8 | Apr 27 | Artifex Ghostscript Type Confusion Vulnerability Affected: 6.0; 7.0 |
| CVE-2015-5287 In wildKEV | 7.8 | Dec 7 | Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Affected: 7.0 |
| CVE-2015-7645 RansomwareIn wildKEV | 7.8 | Oct 15 | Adobe Flash Player Arbitrary Code Execution Vulnerability Affected: 5.0; 6.0 |
| CVE-2013-0640 In wildKEV | 7.8 | Feb 14 | Adobe Reader and Acrobat Memory Corruption Vulnerability Affected: 6.0 |
| CVE-2013-0641 In wildKEV | 7.8 | Feb 14 | Adobe Reader Buffer Overflow Vulnerability Affected: 6.0 |
| CVE-2012-1535 In wildKEV | 7.8 | Aug 15 | Adobe Flash Player Arbitrary Code Execution Vulnerability Affected: 5.0 |
| CVE-2016-9079 In wildKEV | 7.5 | Jun 11 | Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability Affected: 5.0; 6.0; 7.0 |
| CVE-2014-0160 In wildKEV | 7.5 | Apr 7 | OpenSSL Information Disclosure Vulnerability Affected: 6.0 |
| CVE-2012-2034 In wildKEV | 7.5 | Jun 9 | Adobe Flash Player Memory Corruption Vulnerability Affected: 5.0; 6.0 |
| CVE-2023-5869 | 8.8 | Dec 10 | A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification Affected: 7.0 |
| CVE-2022-4254 | 8.8 | Feb 1 | sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters Affected: 7.0 |
| CVE-2021-3656 | 8.8 | Mar 4 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization Affected: 7.0 |
| CVE-2021-44142 | 8.8 | Feb 21 | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP… Affected: 7.0 |
| CVE-2019-8846 | 8.8 | Oct 27 | A use after free issue was addressed with improved memory management Affected: 7.0 |
| CVE-2019-8844 | 8.8 | Oct 27 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8835 | 8.8 | Oct 27 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2020-10531 | 8.8 | Mar 12 | An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1 Affected: 6.0 |
| CVE-2020-6386 | 8.8 | Feb 27 | Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6384 | 8.8 | Feb 27 | Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6383 | 8.8 | Feb 27 | Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-3757 | 8.8 | Feb 13 | Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability Affected: 6.0 |
| CVE-2013-4535 | 8.8 | Feb 11 | The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or… Affected: 6.0 |
| CVE-2020-6416 | 8.8 | Feb 11 | Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6415 | 8.8 | Feb 11 | Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
