2
CVEs
0
Critical
1
High
0
KEV
0
PoC
0
Unpatched C/H
50.0%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
1
MEDIUM
0
LOW
1
Monthly CVE Trend
Affected Products (30)
Fedora
4424
Debian Linux
2110
Chrome
845
Opensuse
841
Leap
647
Ubuntu Linux
640
Enterprise Linux
381
Enterprise Linux Server
265
Enterprise Linux Workstation
261
Enterprise Linux Desktop
249
Active Iq Unified Manager
244
Oncommand Insight
233
Linux Kernel
207
Backports Sle
201
Oncommand Workflow Automation
195
MySQL
185
Enterprise Linux Server Aus
174
Enterprise Linux Eus
159
Enterprise Linux Server Tus
159
Snapcenter
154
Xen
129
Python
121
macOS
113
PHP
113
Vim
112
H700s Firmware
99
H500s Firmware
99
H300s Firmware
98
H410s Firmware
98
Cloud Backup
95
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-35093 | Local privilege escalation in libinput allows authenticated users to execute arbitrary code within graphical compositor contexts by placing malicious Lua bytecode in system or user configuration directories. The vulnerability achieves scope change (CVSS:S:C) with high impact across confidentiality, integrity, and availability (8.8 CVSS), enabling attackers to monitor keyboard input including passwords and sensitive data. No public exploit identified at time of analysis, with EPSS data unavailable for this recently disclosed vulnerability. | HIGH | 8.8 | 0.0% | 44 |
|
| CVE-2026-35094 | Libinput versions prior to 1.26.0 contain a dangling pointer vulnerability in Lua plugin garbage collection that allows local authenticated attackers to read sensitive data from system logs, requiring the ability to deploy malicious Lua plugin files to system directories and Lua plugin support to be enabled in the compositor. The vulnerability has a CVSS score of 3.3 (low severity) with confirmed patch availability, and poses minimal real-world risk due to high prerequisites including local file write access and plugin enablement. | LOW | 3.3 | 0.0% | 17 |
No patch
|