NixOS

Records41All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

NixOS records in CISA KEV

TI-2026-23989 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability CRITICAL 93KEV 2026-05-01

Components

Products in the NVD configurations · select one to filter the records

Nixos 7 records CRITICAL Hydra 5 records MEDIUM Nix 4 records MEDIUM Calamares-nixos-extensions 1 record LOW

Records

4 records in Nix · all components

TI-2024-30614 CVE-2024-45593

Nix affected by unsafe NAR unpacking

MEDIUM 42

Nix is a package manager for Linux and other Unix systems.

CVSS 3.1CRITICAL 9.1 Network Low privileges User interaction EPSS 0.00602 Published 2024-09-10 Fixed in 2.24.6 CWE-22

TI-2026-28741 CVE-2026-39860

Nix sandbox escape: file write via symlink at FOD `.tmp` copy destination

MEDIUM 40

Nix is a package manager for Linux and other Unix systems.

CVSS 3.1CRITICAL 9.0 Local No auth No interaction EPSS 0.00197 Published 2026-04-08 Fixed in 2.28.6, 2.29.3 +5 CWE-61

TI-2019-12962 CVE-2019-17365 · GHSA-4hrm-834j-j4f9

Nix through 2.3 allows local users to gain access to an arbitrary user's account because…

LOW 34

Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00433 Published 2019-10-09 No fix listed CWE-276

TI-2024-18135 CVE-2024-27297

Nix Corruption of fixed-output derivations

LOW 29

Nix is a package manager for Linux and other Unix systems.

CVSS 3.1MEDIUM 6.3 Adjacent network Low privileges No interaction EPSS 0.00586 Published 2024-03-11 Fixed in 2.3.18, 2.18.2 +2 CWE-367

Open these records in search →

Critical	4
High	17
Medium	12
Low	8
No CVSS	0