Open Source BusyBox
productDEcpe:/a:busybox:busybox:-
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
by severity
1critical14high8medium1low
updated 2026-10-27
01
vulnerabilities (26)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2019-5747US | high7.5 | — |
| CVE-2021-42377US | critical9.8 | — |
| CVE-2021-42380US | high7.2 | — |
| CVE-2021-42385US | high7.2 | — |
| CVE-2021-42381US | high7.2 | — |
| CVE-2021-42379US | high7.2 | — |
| CVE-2021-42382US | high7.2 | — |
| CVE-2021-42386US | high7.2 | — |
| CVE-2021-42384US | high7.2 | — |
| CVE-2021-42378US | high7.2 | — |
| CVE-2021-42383US | high7.2 | — |
| CVE-2021-42374US | medium5.3 | — |
| CVE-2021-42376US | medium5.5 | — |
| CVE-2021-42375US | medium5.5 | — |
| CVE-2021-42373US | medium5.5 | — |
| CVE-2026-88830US | high7.5 | — |
| CVE-2026-88837US | — | — |
| CVE-2026-88829US | high7.2 | — |
| CVE-2026-88831US | — | — |
| CVE-2026-90954US | high7.8 | — |
| CVE-2026-88840US | medium5.3 | — |
| CVE-2026-88842US | low3.3 | — |
| CVE-2026-108119US | medium6.3 | — |
| CVE-2026-88832US | high7.3 | — |
| CVE-2026-88839US | medium6.7 | — |
| CVE-2026-88835US | medium6.1 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-416Use After Free9 CVEs
- CWE-125Out-of-bounds Read5 CVEs
- CWE-476NULL Pointer Dereference2 CVEs
- CWE-59Improper Link Resolution Before File Access ('Link Following')2 CVEs
- CWE-787Out-of-bounds Write2 CVEs
- CWE-131Incorrect Calculation of Buffer Size1 CVEs
- CWE-159Improper Handling of Invalid Use of Special Elements1 CVEs
- CWE-20Improper Input Validation1 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)26 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan