Debian security vulnerabilities
Debian security advisories linked into the merged catalog.
Built for Security and operations teams.
330 public records · 74 security-fix timeline events.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 9
- High 78
- Medium 64
- Low 14
2026-07-21165 issues2026-10-18
Known exploited
View all known exploited- High7.8Linux Kernel Improper Ownership Management VulnerabilityPatch nowKEVEPSS 7.88%Mar 22, 2023
- High7.1Linux Kernel Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 1.35%Nov 25, 2024
- Medium6.3Apple Multiple Products Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 22.59%Nov 19, 2024
- High8.8Apple Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 10.16%Nov 19, 2024
- High7.8Linux Kernel Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 3.40%Nov 7, 2024
- High7.8Android Kernel Remote Code Execution VulnerabilityPatch nowKEVEPSS 2.70%Jun 10, 2024
- High7.0Linux Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 3.67%Jan 30, 2023
- Critical10.0Debian-specific Redis Server Lua Sandbox Escape VulnerabilityPatch nowKEVEPSS 99.35%Feb 18, 2022
Recently published
Browse catalog- High7.2FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Zero for sub-byte imageOpen the advisoryOct 17, 2026
- High8.3FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset.Open the advisoryOct 17, 2026
- High8.8ZoneMinder is a free, open source closed-circuit television software application.Check if you run itEPSS 1.06%Oct 16, 2026
- High7.5A flaw was found in spice-server.Check if you run itEPSS 0.25%Oct 16, 2026
- High7.5A flaw was found in spice-server.Check if you run itEPSS 0.40%Oct 16, 2026
- Medium6.6A flaw was found in Nautilus.Check if you run itEPSS 0.13%Oct 16, 2026
- Medium6.0A flaw was found in luksmeta.Check if you run itEPSS 0.11%Oct 16, 2026
- High7.8A flaw was found in cifs-utils.Check if you run itEPSS 0.15%Oct 16, 2026
- Medium6.8The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints.Check if you run itEPSS 9.00%Oct 16, 2026
- High7.5sync 2026-10-16T15:41:51ZCheck if you run itEPSS 0.28%Oct 16, 2026