EL
Product
Enterprise Linux Server
On CISA KEVExploited in the wildRansomware-linked
1,886
CVEs
59
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 263High 233Medium 4Low 0
Watch
Add Enterprise Linux Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-7550 | 8.8 | Mar 1 | The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value… Affected: 7.0 |
| CVE-2018-6560 | 8.8 | Feb 2 | In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because… Affected: 7.0 |
| CVE-2017-17405 | 8.8 | Dec 15 | Ruby before 2.4.3 allows Net::FTP command injection Affected: 7.0 |
| CVE-2017-5121 | 8.8 | Oct 27 | Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a… Affected: 6.0 |
| CVE-2017-5116 | 8.8 | Oct 27 | Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a… Affected: 6.0 |
| CVE-2017-5114 | 8.8 | Oct 27 | Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to… Affected: 6.0 |
| CVE-2017-5113 | 8.8 | Oct 27 | Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit heap… Affected: 6.0 |
| CVE-2017-5111 | 8.8 | Oct 27 | A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF… Affected: 6.0 |
| CVE-2017-5108 | 8.8 | Oct 27 | Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a… Affected: 6.0 |
| CVE-2017-5100 | 8.8 | Oct 27 | A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page Affected: 6.0 |
| CVE-2017-5098 | 8.8 | Oct 27 | A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted… Affected: 6.0 |
| CVE-2017-5095 | 8.8 | Oct 27 | Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF… Affected: 6.0 |
| CVE-2017-5091 | 8.8 | Oct 27 | A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a… Affected: 6.0 |
| CVE-2017-5088 | 8.8 | Oct 27 | Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to… Affected: 6.0 |
| CVE-2017-5087 | 8.8 | Oct 27 | A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5078 | 8.8 | Oct 27 | Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform… Affected: 6.0 |
| CVE-2017-5077 | 8.8 | Oct 27 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to… Affected: 6.0 |
| CVE-2017-5073 | 8.8 | Oct 27 | Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an… Affected: 6.0 |
| CVE-2017-5063 | 8.8 | Oct 27 | A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5062 | 8.8 | Oct 27 | A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to potentially perform… Affected: 6.0 |
| CVE-2017-5059 | 8.8 | Oct 27 | Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to potentially obtain code… Affected: 6.0 |
| CVE-2017-5057 | 8.8 | Oct 27 | Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5056 | 8.8 | Oct 27 | A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5054 | 8.8 | Oct 27 | An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory… Affected: 6.0 |
| CVE-2017-5052 | 8.8 | Oct 27 | An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote… Affected: 6.0 |
| CVE-2017-5208 | 8.8 | Aug 22 | Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which… Affected: 7.0 |
| CVE-2017-9462 | 8.8 | Jun 6 | In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a… Affected: 6.0; 7.0 |
| CVE-2016-9842 | 8.8 | May 23 | The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers Affected: 6.0; 7.0 |
| CVE-2016-9840 | 8.8 | May 23 | inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: 6.0; 7.0 |
| CVE-2017-5043 | 8.8 | Apr 24 | Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5029 | 8.8 | Apr 24 | The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android,… Affected: 6.0 |
| CVE-2016-7545 | 8.8 | Jan 19 | SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call Affected: 6.0; 7.0 |
| CVE-2016-7865 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability Affected: 5.0; 6.0 |
The 500 most important CVEs for this product (exploited first, then by severity)