GNU Project
Security Scorecard
Score
21F
Total CVEs
484
Patch Rate
0%
1 patched
Avg Response
-
days to patch
Critical Gaps
12
exploitable, no detection
Severity Breakdown
Critical1
High7
Medium13
Low3
Patch Status
Patched1 (0%)
Partial/Workaround0 (0%)
Unpatched483 (100%)
CVEs (484)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-65410 | Unrtf Stack Overflow Denial of Service | MEDIUM | 6.2 | 0d | Unpatched |
| CVE-2025-61662 | GRUB Gettext Module Vulnerability | MEDIUM | 4.9 | 27d | Unpatched |
| CVE-2025-54771 | GRUB Crash Vulnerability | MEDIUM | 4.9 | 27d | Unpatched |
| CVE-2025-61663 | GRUB2 Denial of Service | MEDIUM | 4.9 | 27d | Unpatched |
| CVE-2025-58183 | tar Reader Denial of Service | MEDIUM | 4.3 | 51d | Unpatched |
| CVE-2024-12087 | rsync Path Traversal Vulnerability | MEDIUM | 6.5 | 336d | Unpatched |
| CVE-1999-1594 | Uninitialized Pointer Dereference Vulnerability | N/A | - | 1869d | Unpatched |
| CVE-1999-0199 | glibc Vulnerability | CRITICAL | 9.8 | - | Patched |
| CVE-2017-3938 | Uninitialized Pointer Dereference in glibc | N/A | - | 2837d | Unpatched |
| CVE-2017-3947 | Zero-Day in OpenPGP | N/A | - | 2837d | Unpatched |