FreeBSD Project FreeBSD OS

productDE

cpe:/o:freebsd:freebsd:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

11critical50high75medium4low

updated 2026-10-27

vulnerabilities (168)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-5477US	high7.8OT critical	99.6% (100th)	KEV	no fix	2015-07-29	—
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	no fix	2024-07-01	—
CVE-2016-2776US	high7.5	89.5% (100th)	Exploit	no fix	2016-09-28	—
CVE-2016-0800US	medium5.9	82.1% (100th)	Exploit	no fix	2016-03-01	—
CVE-2023-38408US	critical9.8	79.7% (100th)	Exploit	no fix	2023-07-20	—
CVE-2016-6515US	high7.5	58.6% (99th)	Exploit	no fix	2016-08-07	—
CVE-2016-10009US	high7.3	37.4% (99th)	Exploit	no fix	2017-01-05	—
CVE-2016-10010US	high7.0	4.24% (91st)	Exploit	no fix	2017-01-05	—
CVE-2026-45447US	—	4.00% (90th)	Exploit	no fix	2026-06-09	—
CVE-2022-23093US	—	2.40% (84th)	Exploit	no fix	2024-02-15	—
CVE-2016-0702US	medium5.1	1.91% (80th)	Exploit	no fix	2016-03-03	—
CVE-2022-47522US	high7.5	0.89% (59th)	Exploit	no fix	2023-04-15	—
CVE-2016-1286US	high8.6	60.4% (99th)	—	no fix	2016-03-09	—
CVE-2014-8500US	high7.8	59.0% (99th)	—	no fix	2014-12-11	—
CVE-2016-1285US	medium6.8	57.4% (99th)	—	no fix	2016-03-09	—
CVE-2015-8000US	medium5.0	55.9% (99th)	—	no fix	2015-12-16	—
CVE-2014-0198US	medium4.3	40.3% (99th)	—	no fix	2014-05-06	—
CVE-2015-4620US	high7.8	38.8% (99th)	—	no fix	2015-07-08	—
CVE-2016-8864US	high7.5	38.7% (99th)	—	no fix	2016-11-02	—
CVE-2015-5722US	high7.8	34.9% (98th)	—	no fix	2015-09-05	—
CVE-2014-0591US	low2.6	32.7% (98th)	—	no fix	2014-01-14	—
CVE-2016-0799US	critical9.8	32.4% (98th)	—	no fix	2016-03-03	—
CVE-2016-0797US	high7.5	27.0% (98th)	—	no fix	2016-03-03	—
CVE-2015-5986US	high7.1	26.9% (98th)	—	no fix	2015-09-05	—
CVE-2016-0798US	high7.5	24.4% (98th)	—	no fix	2016-03-03	—
CVE-2015-1349US	medium5.4	22.9% (98th)	—	no fix	2015-02-19	—
CVE-2016-2088US	medium6.8	22.8% (98th)	—	no fix	2016-03-09	—
CVE-2016-7053US	high7.5	21.7% (98th)	—	no fix	2017-05-04	—
CVE-2013-6449US	medium4.3	21.2% (98th)	—	no fix	2013-12-23	—
CVE-2015-8704US	medium6.5	20.3% (97th)	—	no fix	2016-01-20	—
CVE-2015-1283US	medium6.8	18.4% (97th)	—	no fix	2015-07-23	—
CVE-2013-6450US	medium5.8	15.3% (97th)	—	no fix	2014-01-01	—
CVE-2017-3738US	medium5.9	13.4% (96th)	—	no fix	2017-12-07	—
CVE-2020-11264US	critical9.8	13.2% (96th)	—	no fix	2021-09-08	—
CVE-2013-4353US	medium4.3	11.9% (96th)	—	no fix	2014-01-09	—
CVE-2020-11301US	high7.5	11.1% (96th)	—	no fix	2021-09-08	—
CVE-2017-3736US	medium6.5	10.1% (96th)	—	no fix	2017-11-02	—
CVE-2014-8680US	medium5.4	8.99% (95th)	—	no fix	2014-12-11	—
CVE-2020-10967US	medium5.3	8.15% (95th)	—	no fix	2020-05-18	—
CVE-2019-12900US	critical9.8	7.98% (95th)	—	no fix	2019-06-19	—
CVE-2020-26147US	medium5.4	7.60% (95th)	—	no fix	2021-05-11	—
CVE-2020-10957US	high7.5	7.17% (94th)	—	no fix	2020-05-18	—
CVE-2016-0704US	medium5.9	6.90% (94th)	—	no fix	2016-03-02	—
CVE-2020-26139US	medium5.3	6.49% (94th)	—	no fix	2021-05-11	—
CVE-2020-10958US	medium5.3	6.12% (93rd)	—	no fix	2020-05-18	—
CVE-2020-24586US	low3.5	5.76% (93rd)	—	no fix	2021-05-11	—
CVE-2020-26146US	medium5.3	5.62% (93rd)	—	no fix	2021-05-11	—
CVE-2016-0703US	medium5.9	5.40% (93rd)	—	no fix	2016-03-02	—
CVE-2020-26144US	medium6.5	4.91% (92nd)	—	no fix	2021-05-11	—
CVE-2017-13082US	high8.1OT elevated	4.58% (92nd)	—	no fix	2017-10-17	—

showing 50 of 168

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation40 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor15 CVEs
CWE-476NULL Pointer Dereference11 CVEs
CWE-125Out-of-bounds Read9 CVEs
CWE-617Reachable Assertion9 CVEs
CWE-787Out-of-bounds Write9 CVEs
CWE-320CWE-3208 CVEs
CWE-322Key Exchange without Entity Authentication8 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)168 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan