Gnu vulnerabilities4 known to be exploited.
Gnu has 1,130 published vulnerabilities across 130 products in our catalogue. 4 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Binutils, with 252. If you run Gnu software, patch the exploited flaws first.
The most recent Gnu flaw added to the known-exploited list is CVE-2014-6278, on 2 October 2025. We keep watching the known-exploited list.
Which Gnu vulnerabilities are being exploited?
4 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8GNU Bash OS Command Injection Vulnerability
GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environment.
- 7.8GNU C Library Buffer Overflow Vulnerability
GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.
- 9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.
- 9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.
Which Gnu flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by...
- >99%
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown...
- >99%
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environment, as...
- 96%CVE-1999-0016Medium
Land IP denial of service.
- 95%CVE-2015-0235Critical
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1)...
- 91%CVE-2015-7547High
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service...
- 68%CVE-1999-0612Not rated
A version of finger is running that exposes valid user information to any entity on the network.
All Gnu products we track.
123 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Binutilsbinutils252 vulnerabilities77 versions
- Glibcglibc149 vulnerabilities183 versions
- Libredwglibredwg87 vulnerabilities698 versions
- Gnutlsgnutls69 vulnerabilities367 versions
- Mailmanmailman47 vulnerabilities76 versions
- Grub2grub243 vulnerabilities10 versions
- Emacsemacs35 vulnerabilities109 versions
- Ncursesncurses27 vulnerabilities20 versions
- Wgetwget19 vulnerabilities46 versions
- Bashbash18 vulnerabilities39 versions
- Tartar16 vulnerabilities41 versions
- Pspppspp15 vulnerabilities36 versions
- Gccgcc14 vulnerabilities128 versions
- Libextractorlibextractor13 vulnerabilities20 versions
- Patchpatch13 vulnerabilities12 versions
- Recutilsrecutils13 vulnerabilities11 versions
- Cpiocpio12 vulnerabilities16 versions
- Libtasn1libtasn112 vulnerabilities84 versions
- Groffgroff11 vulnerabilities16 versions
- Gzipgzip11 vulnerabilities26 versions
- Coreutilscoreutils10 vulnerabilities62 versions
- Privacy Guardprivacy_guard10 vulnerabilities35 versions
- Gdbgdb9 vulnerabilities75 versions
- Screenscreen9 vulnerabilities30 versions
This directory lists the 123 Gnu products with at least one tracked version, of 130 in our catalogue.
Running Gnu? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environment.
- Matched to
- Bash on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 1,130 published vulnerabilities across 130 products and 3,773 versions from Gnu. The most recent Gnu flaw added to the known-exploited list is CVE-2014-6278, on 2 October 2025.
4 Gnu vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2014-6278, CVE-2023-4911 and CVE-2014-6271. The full list is on this page.
Binutils, with 252 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a EdgeProtect account and track the Gnu products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.