Linux

Records21728All Threatist records

Exploited (KEV)34In CISA KEV

CVSS critical970CVSS 9.0–10.0

CVSS high8159CVSS 7.0–8.9

Exploited now

Linux records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2025-26358 Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability CRITICAL 100KEV 2026-09-18 TI-2025-26636 Linux Kernel Race Condition Vulnerability CRITICAL 93KEV 2026-09-18 TI-2026-38352 Linux Kernel Out-of-Bounds Write Vulnerability CRITICAL 97KEV 2026-09-18 TI-2026-38448 Linux Kernel Unspecified Vulnerability CRITICAL 93KEV 2026-08-27 TI-2022-00894 Linux Kernel Out-of-Bounds Write Vulnerability CRITICAL 93KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Linux Kernel 15279 records CRITICAL Tizen 12 records MEDIUM Kernel 9 records MEDIUM Acrn 7 records LOW Util-linux 4 records LOW Mac80211 3 records LOW Direct Connect 2 records MEDIUM Audit 1 record LOW

Records

12 records in Tizen · all components

TI-2021-07676 CVE-2021-25437 · GHSA-36pg-q9f9-m4xv

Improper input validation in Samsung Tizen wearable devices

MEDIUM 47

Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers to arbitrary code execution by replacing FOTA update file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02352 Published 2021-07-08 Fixed in Firmware update JUL-2021 Release CWE-20

TI-2021-07675 CVE-2021-25436 · GHSA-pqrw-6jhr-7hm6

Improper input validation in Samsung Tizen wearable devices

MEDIUM 45

Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code execution via Samsung Accessory Protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01641 Published 2021-07-08 Fixed in Firmware update JUL-2021 Release CWE-20

TI-2021-07674 CVE-2021-25435 · GHSA-qgcm-6r7q-m4wm

Improper input validation in Samsung Tizen wearable devices

MEDIUM 45

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using recovery partition in wireless firmware download mode.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01675 Published 2021-07-08 Fixed in Firmware update JUL-2021 Release CWE-20

TI-2021-07673 CVE-2021-25434 · GHSA-pq73-4ww4-wr38

Improper input validation in Samsung Tizen wearable devices

MEDIUM 45

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using param partition in wireless firmware download mode.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01675 Published 2021-07-08 Fixed in Firmware update JUL-2021 Release CWE-20

TI-2018-11647 CVE-2018-16263 · GHSA-5h96-c4j5-cc68

The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP…

LOW 39

The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to improper D-Bus security policy configurations.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00781 Published 2020-01-22 No fix listed CWE-269

TI-2018-11646 CVE-2018-16262 · GHSA-pm6q-ff9r-9f8w

The pkgmgr system service in Tizen allows an unprivileged process to perform package…

LOW 39

The pkgmgr system service in Tizen allows an unprivileged process to perform package management actions, due to improper D-Bus security policy configurations.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00781 Published 2020-01-22 No fix listed CWE-269

TI-2018-11651 CVE-2018-16267 · GHSA-75cx-mgvw-f42h

The system-popup system service in Tizen allows an unprivileged process to perform…

LOW 36

The system-popup system service in Tizen allows an unprivileged process to perform popup-related system actions, due to improper D-Bus security policy configurations.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.0068 Published 2020-01-22 No fix listed CWE-269

TI-2018-11650 CVE-2018-16266 · GHSA-h9xw-2mh8-hx46

The Enlightenment system service in Tizen allows an unprivileged process to fully control…

LOW 36

The Enlightenment system service in Tizen allows an unprivileged process to fully control or capture windows, due to improper D-Bus security policy configurations.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00705 Published 2020-01-22 No fix listed CWE-269

TI-2018-11649 CVE-2018-16265 · GHSA-f95v-wr93-5m3v

The bt/bt_core system service in Tizen allows an unprivileged process to create a system…

LOW 30

The bt/bt_core system service in Tizen allows an unprivileged process to create a system user interface and control the Bluetooth pairing process, due to improper D-Bus security policy configurations.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0059 Published 2020-01-22 No fix listed CWE-269

TI-2018-11648 CVE-2018-16264 · GHSA-gcr3-7gvg-jhhf

The BlueZ system service in Tizen allows an unprivileged process to partially control…

LOW 30

The BlueZ system service in Tizen allows an unprivileged process to partially control Bluetooth or acquire sensitive information, due to improper D-Bus security policy configurations.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00581 Published 2020-01-22 No fix listed CWE-200

TI-2021-07672 CVE-2021-25433 · GHSA-78rr-8w79-72qw

Improper authorization in Samsung Tizen wearable devices

LOW 24

Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory reset using dbus signal.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00223 Published 2021-07-08 Fixed in Firmware update JUL-2021 Release CWE-285

TI-2018-11652 CVE-2018-16268 · GHSA-ch5h-mq67-vq6m

The SoundServer/FocusServer system services in Tizen allow an unprivileged process to…

LOW 21

The SoundServer/FocusServer system services in Tizen allow an unprivileged process to perform media-related system actions, due to improper D-Bus security policy configurations.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00518 Published 2020-01-22 No fix listed CWE-269

Open these records in search →

Critical	970
High	8159
Medium	8214
Low	408
No CVSS	3977