Oracle Linux
productDEcpe:/o:oracle:linux:-
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
588critical4266high8961medium201low
updated 2026-10-27
01
vulnerabilities (25,344)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2026-109618US | critical9.8OT critical | KEV |
| CVE-2021-40438US | critical9.0OT critical | KEV |
| CVE-2026-109619US | high8.1OT critical | KEV |
| CVE-2023-4863US | high8.8OT critical | KEV |
| CVE-2021-3156US | high7.8OT critical | KEV |
| CVE-2024-38475US | critical9.1OT critical | KEV |
| CVE-2025-24813US | critical9.8OT critical | KEV |
| CVE-2017-12615US | high8.1OT critical | KEV |
| CVE-2022-22965US | critical9.8OT critical | KEV |
| CVE-2015-5477US | high7.8OT critical | KEV |
| CVE-2023-36884US | —OT critical | KEV |
| CVE-2026-34486US | —OT critical | KEV |
| CVE-2026-31431US | —OT critical | KEV |
| CVE-2020-17530US | critical9.8OT critical | KEV |
| CVE-2021-4034US | high7.8OT critical | KEV |
| CVE-2020-15999US | critical9.6OT critical | KEV |
| CVE-2023-4911US | high7.8OT critical | KEV |
| CVE-2025-32463US | high7.8OT critical | KEV |
| CVE-2023-36874US | —OT critical | KEV |
| CVE-2025-27363US | high8.1OT critical | KEV |
| CVE-2023-28205US | high8.8OT critical | KEV |
| CVE-2023-41993US | high8.8OT critical | KEV |
| CVE-2024-9680US | critical9.8OT critical | KEV |
| CVE-2018-14634US | high7.8OT critical | KEV |
| CVE-2022-26485US | high8.8OT critical | KEV |
| CVE-2021-30858US | high8.8OT critical | KEV |
| CVE-2025-6558US | —OT critical | KEV |
| CVE-2017-1000253US | high7.8OT critical | KEV |
| CVE-2022-2586US | high7.8OT critical | KEV |
| CVE-2024-44308US | high8.8OT critical | KEV |
| CVE-2026-64849US | —OT critical | KEV |
| CVE-2022-0995US | high7.8OT critical | KEV |
| CVE-2025-41244US | —OT critical | KEV |
| CVE-2022-0492US | high7.8OT critical | KEV |
| CVE-2025-48384US | —OT critical | KEV |
| CVE-2025-24201US | critical10.0OT critical | KEV |
| CVE-2023-0266US | high7.0OT critical | KEV |
| CVE-2026-87491US | —OT critical | KEV |
| CVE-2024-53104US | high7.8OT critical | KEV |
| CVE-2025-39682US | critical9.8OT critical | KEV |
| CVE-2024-36971US | high7.8OT critical | KEV |
| CVE-2026-3909US | high8.8OT critical | KEV |
| CVE-2025-31277US | —OT critical | KEV |
| CVE-2025-39964US | medium5.5OT critical | KEV |
| CVE-2025-38352US | —OT critical | KEV |
| CVE-2026-53266US | —OT critical | KEV |
| CVE-2026-53362US | —OT critical | KEV |
| CVE-2021-39226US | high7.3OT critical | KEV |
| CVE-2023-5217US | high8.8OT critical | KEV |
| CVE-2024-44309US | medium6.3OT critical | KEV |
showing 50 of 25,344
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-416Use After Free3,493 CVEs
- CWE-476NULL Pointer Dereference3,461 CVEs
- CWE-20Improper Input Validation2,589 CVEs
- CWE-125Out-of-bounds Read1,897 CVEs
- CWE-401Missing Release of Memory after Effective Lifetime1,795 CVEs
- CWE-787Out-of-bounds Write1,589 CVEs
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1,267 CVEs
- CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1,178 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)25,344 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan