Priority MEDIUM 49
In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.0018 · Published 2026-04-10 · Fixed CWE-669
Priority LOW 27
In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.0021 · Published 2026-04-10 · Fixed in 261 CWE-1025
Priority MEDIUM 64
In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00075 · Published 2026-04-10 · Fixed in 260 CWE-348
Priority LOW 29
In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.
CVSS 3.1MEDIUM 6.4· Physical · No auth · No interaction · EPSS 0.0015 · Published 2026-04-10 · Partial fix · 260 CWE-669
Priority LOW 33
In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.0011 · Published 2026-04-10 · Fixed in 260 CWE-863
Priority LOW 23
In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0009 · Published 2026-04-10 · Fixed in 260 CWE-696
Priority LOW 24
systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00126 · Published 2026-03-23 · Partial fix · 257.11, 258.5 +1 CWE-269
Priority MEDIUM 55
A vulnerability was found in systemd-coredump.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.01277 · Published 2025-05-30 · Partial fix · 252.37, 253.32 +12 CWE-364
Priority LOW 28
A vulnerability was found in systemd-resolved.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00842 · Published 2023-12-23 · Fixed in 239-82.el8, 252-32.el9_4 CWE-300
Priority LOW 24
An issue was discovered in systemd 253.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00349 · Published 2023-06-13 · No fix listed CWE-354
Priority LOW 24
An issue was discovered in systemd 253.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00325 · Published 2023-06-13 · No fix listed CWE-354
Priority LOW 30
An issue was discovered in systemd 253.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00341 · Published 2023-06-13 · No fix listed CWE-354
Priority HIGH 69
systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01051 · Published 2023-03-03 · Fixed CWE-269
Priority MEDIUM 58
A vulnerability was found in systemd.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00822 · Published 2023-01-11 · Partial fix CWE-200
Priority LOW 24
systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00271 · Published 2022-11-23 · Partial fix CWE-400
Priority LOW 25
An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00443 · Published 2022-11-08 · Partial fix CWE-193
Priority MEDIUM 45
A use-after-free vulnerability was found in systemd.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01424 · Published 2022-09-09 · Fixed CWE-416
Priority LOW 28
A flaw was found in systemd.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01735 · Published 2022-08-23 · Fix deferred CWE-674
Priority LOW 36
basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an o…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.08792 · Published 2021-07-20 · Fixed CWE-770
Priority LOW 30
An exploitable denial-of-service vulnerability exists in Systemd 245.
CVSS 3.1MEDIUM 6.1· Adjacent network · No auth · No interaction · EPSS 0.01431 · Published 2021-05-10 · Partial fix CWE-290
Priority LOW 32
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended.
CVSS 3.1MEDIUM 6.7· Local · Low privileges · User interaction · EPSS 0.00461 · Published 2020-06-03 · Partial fix CWE-269
Priority LOW 36
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00456 · Published 2020-03-31 · Fixed in v245-rc1 CWE-416
Priority LOW 25
systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedure).
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00395 · Published 2020-03-11 · No fix listed
Priority LOW 24
An issue was discovered in button_open in login/logind-button.c in systemd before 243.
CVSS 3.1MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.00425 · Published 2020-01-21 · Partial fix CWE-401
Priority MEDIUM 48
systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03138 · Published 2019-10-30 · No fix listed CWE-295
Load more
THREATIST.IORead the docs