en
GNU is a global free software project and operating-system initiative. Its core mission is to provide a Unix-compatible system and reusable software packages that preserve users' freedom to run, study, modify, and share software. The project includes widely used command-line tools, libraries, compilers, editors, and development utilities maintained through an open community.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/22/2026, GNU recorded 34 security vulnerabilities in the last 90 days across 9 products, including 4 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Binutils had the most security vulnerabilities in the GNU ecosystem, with 12 vulnerabilities—approximately 35.29% of the provider's total vulnerabilities during this period.
CVE-2026-111167GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs DecoderCVE-2026-103658CVE-2026-103658CVE-2026-108976CVE-2026-108976CVE-2026-75820Integer Truncation Leading to Heap Corruption in GNU AspellCVE-2026-75819Out-of-bounds Read in GNU Aspell| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-111167GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder | Exploitation statusNot exploited | FixYes | Affected productLibreDWG | Published10/15/2026 | SeverityMedium |
CVE-2026-103658CVE-2026-103658 | Exploitation statusActively exploited | FixYes | Affected productAspell | Published10/12/2026 | |
CVE-2026-108976CVE-2026-108976 | Exploitation statusNot exploited | FixYes | Affected productEmacs | Published10/11/2026 | |
CVE-2026-75820Integer Truncation Leading to Heap Corruption in GNU Aspell | Exploitation statusNot exploited | FixYes | Affected productAspell | Published10/06/2026 | |
CVE-2026-75819Out-of-bounds Read in GNU Aspell | Exploitation statusNot exploited | FixYes | Affected productAspell | Published10/06/2026 | |
CVE-2026-75818Heap Buffer Overflow in GNU Aspell's prezip utility | Exploitation statusNot exploited | FixYes | Affected productAspell | Published10/06/2026 | |
CVE-2026-97876Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address | Exploitation statusNot exploited | FixYes | Affected productgrub2 | Published | |
CVE-2026-100310GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX | Exploitation statusActively exploited | FixYes | Affected productlibextractor | Published | |
CVE-2026-96269CVE-2026-96269 | Exploitation statusNot exploited | FixNo | Affected productEmacs | Published09/22/2026 | |
CVE-2026-91782GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference | Exploitation statusActively exploited | FixNo | Affected productBinutils | Published |
1,286 Results | Page 1 of 129
| SeverityLow |
| SeverityLow |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |