Debian
Debian security advisories linked into the merged catalog.
250 public records currently classified under this stack.
Known exploited
All KEV for Debian- Critical10.0Debian-specific Redis Server Lua Sandbox Escape VulnerabilityKEVEPSS 99.4%Feb 18, 2022
- High7.5Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free VulnerabilityKEVEPSS 87.5%Jun 11, 2018
- High8.8Google Chromium V8 Out-of-Bounds Read VulnerabilityKEVEPSS 48.1%Mar 29, 2016
- Medium6.3Apple Multiple Products Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 22.6%Nov 19, 2024
- High8.8Apple Multiple Products Code Execution VulnerabilityKEVEPSS 10.2%Nov 19, 2024
- High7.8Linux Kernel Improper Ownership Management VulnerabilityKEVEPSS 7.9%Mar 22, 2023
- High7.0Linux Kernel Use-After-Free VulnerabilityKEVEPSS 3.7%Jan 30, 2023
- High7.8Linux Kernel Out-of-Bounds Write VulnerabilityKEVEPSS 3.4%Dec 2, 2024
Recent Debian findings
Full list- High7.8A flaw was found in cifs-utils.EPSS 0.1%Oct 16, 2026
- Medium6.8Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records.EPSS 0.1%Oct 15, 2026
- Medium6.8Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory.EPSS 0.1%Oct 15, 2026
- Medium5.7zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory() in zzip/zip.c that allows attackers to read past the mapped centr…EPSS 0.1%Oct 15, 2026
- Medium6.9libfsapfs through 20260921 contains an integer underflow in libfsapfs_key_encrypted_key_read_data() that allows attackers to trigger heap out-of-bounds reads via craft…EPSS 0.2%Oct 15, 2026
- Medium6.9GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSe…EPSS 0.1%Oct 15, 2026
- Medium6.9libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a() in src/loaders/prowizard/p61a.c.EPSS 0.2%Oct 15, 2026
- Medium6.8Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices…EPSS 0.2%Oct 15, 2026
- Medium6.9catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the…EPSS 0.2%Oct 15, 2026
- Medium6.9FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modula…EPSS 0.2%Oct 15, 2026