7
CVEs
0
Critical
0
High
0
KEV
5
PoC
0
Unpatched C/H
57.1%
Patch Rate
0.2%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
0
MEDIUM
2
LOW
5
Monthly CVE Trend
Affected Products (30)
Binutils
234
Glibc
108
Debian Linux
94
Ubuntu Linux
91
Libredwg
89
Opensuse
84
Fedora
77
Leap
60
Enterprise Linux
50
Gnutls
48
Enterprise Linux Workstation
35
Enterprise Linux Desktop
33
Grub2
33
Enterprise Linux Server
33
Backports Sle
25
Emacs
25
Ontap Select Deploy Administration Utility
22
Enterprise Linux Server Aus
22
Ncurses
19
Enterprise Linux Server Tus
18
Mailman
17
Pspp
16
Enterprise Linux Eus
13
Bash
13
Hci Management Node
13
Solidfire
13
Linux Enterprise Server
13
Libextractor
13
Openshift Container Platform
12
Wget
12
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-77219 | Integer overflow in GNU Emacs PBM/PPM/PGM image loader (all versions before 31.0.91) enables heap memory disclosure when a user opens a crafted image file. Signed integer multiplication of image height, width, and channel count wraps to a negative value for sufficiently large inputs, bypassing the allocated-buffer bounds check and allowing the pixel reader to over-read heap contents, which are then rendered on-screen as color values. No active exploitation has been confirmed (not in CISA KEV), and no public exploit code has been identified at time of analysis; however, the VulnCheck-reported CVSS 4.0 score of 6.9 reflects high confidentiality and availability impact under local conditions with user interaction. | MEDIUM | 6.9 | 0.1% | 35 |
|
| CVE-2026-90622 | Null pointer dereference in GNU libredwg 0.13.4's Layer table encoding function allows a local attacker to crash any application built on the library by supplying a DWG file whose LAYER entity has no material handle assigned. The root cause is commit 27118c40 ( | LOW | 1.9 | 0.2% | 30 |
PoC
|
| CVE-2026-91781 | A null pointer dereference in GNU Binutils 2.47 allows a local attacker to crash affected utilities by supplying a crafted ELF file. The flaw resides in elf_x86_64_common_section_index() in bfd/elf64-x86-64.c, part of the ELF section-handling path, and only denies availability of the tool process - there is no confidentiality or integrity impact. Publicly available proof-of-concept code exists and the issue is fixed in version 2.48, but real-world risk is low given the local attack vector, minimal impact, and low EPSS-relevant severity. | LOW | 1.9 | 0.1% | 30 |
PoC
|
| CVE-2026-91780 | A NULL pointer dereference in GNU Binutils 2.47 lets a locally-supplied, malformed ELF object crash BFD-based tools such as ld, objdump or readelf when they parse the crafted symbol tables. Only availability is affected — the process dies with a segmentation fault and there is no confidentiality or integrity impact. Publicly available exploit code exists (a PoC is published in a GitHub repository referenced from the Sourceware bug report), but there is no CISA KEV listing and no vendor patch at the time of analysis, since the project has reportedly not yet responded to the bug report. | LOW | 1.9 | 0.1% | 30 |
PoC
No patch
|
| CVE-2026-91779 | We need produce JSON per schema. Let's analyze. CVE-2026-91779: GNU Binutils 2.47, function _bfd_elf_eh_frame_section_offset in bfd/elf-eh-frame.c, null pointer dereference, local attack, CVSS 1.9 (CVSS 4.0 vector AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L...). CWE-476. POC publicly available. Reported by VulDB. CPE gnu:binutils. Tags: Denial Of Service, Null Pointer Dereference, Binutils, Gnu. EUVD affected: Binutils 2.47. References include sourceware bugzilla 34446, exploit GitHub. Need fields. Product name: "GNU Binutils" (1-3 words). Summary: Original synthesis. Start with impact and product. "A local null pointer dereference in GNU Binutils 2.47's ELF exception-handling frame parser allows crafted object files to crash tools like objdump, ld, or readelf..." Mention local, POC public, CVSS low 1.9, DoS only. Avoid "A vulnerability..." start. Let's craft 2-3 sentences. Technical context: Explain binutils, BFD library, elf-eh-frame.c, EH frame handling; CWE-476 null pointer dereference; local attack requires processing malicious ELF file with crafted .eh_frame section. Mention CPE gnu:binutils. Risk assessment: CVSS 4.0 1.9 with AV:L, PR:L, VA:L only; EPSS not provided; KEV not listed; POC publicly available (per input "exploit has been released to public"). Note exploitability limited: local, requires user to run binutils tool on crafted file, low impact (DoS only). State EPSS missing. SSVC not provided. Affected products: GNU Binutils 2.47; CPE gnu:binutils:*; EUVD says 2.47; references sourceware bugzilla. Remediation: No patch identified; project informed but not responded. Compensating controls: avoid processing untrusted ELF files with binutils tools, sandbox, validate input, use alternative tools, monitor for crash. Mention advisory URLs. Since patch status says not available -> "No vendor-released patch identified at time of analysis." But input says project informed but has not responded. So state that. Exploit scenario: local attacker provides mal | LOW | 1.9 | 0.1% | 30 |
PoC
No patch
|
| CVE-2026-16599 | Denial of service in GNU wget's FTP OPIE/S-KEY authentication handler allows a malicious or intercepted FTP server to cause wget to perform approximately 2.1 billion MD5 computations by supplying a crafted sequence number near INT_MAX in the OPIE challenge line. All versions of GNU wget with OPIE/S-KEY FTP authentication support are affected per CPE cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*. The --timeout option provides no mitigation because it governs network I/O exclusively, not CPU-bound computation. No public exploit identified at time of analysis; a fix is confirmed via upstream GitLab commit. | MEDIUM | 5.1 | 0.4% | 26 |
|
| CVE-2026-90804 | GNU Binutils 2.47 contains a heap out-of-bounds write in the ELF `.eh_frame` handler `_bfd_elf_write_section_eh_frame`, triggered when a malformed object file causes the library to compute a negative size that is then passed to a `memmove` during section rewriting. The attack is local: an attacker must get a crafted ELF file processed by a BFD-based tool (such as `ld`, `objcopy`, or `strip`) on the target system, after which the process can corrupt heap memory and crash. Exploit code is publicly available, though the CVSS 4.0 base score is only 0.9 because the required privileges, user interaction, and limited observed impact keep real-world severity low; there is no CISA KEV listing, and upstream has not responded to the bug report. | LOW | 0.9 | 0.1% | 24 |
PoC
No patch
|