CVE security advisories and vulnerability history for Debian.
Debian has 10,226 published CVE records since 1999, of which 122 are in CISA's Known Exploited Vulnerabilities catalog and 1,031 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Debian products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
A quick read on Debian's vulnerability posture, as a share of its 10,226 published CVEs.
across 10,226 scored CVEs
5,638 of 10,226 scored
122 of 10,226 CVEs
1,031 of 10,226 CVEs
9,893 of 10,226 CVEs
How the CVSS severity of Debian's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
122
122 of Debian's CVEs are confirmed exploited in the wild.
Public exploits
1,031
1,031 of Debian's CVEs have a known public exploit available.
The Debian products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
The CWE weakness categories most often found in Debian CVEs. Follow any weakness for its full explanation.
The CVE Numbering Authorities that publish Debian CVE records.
How many Debian CVEs were published each year.
The most recently disclosed vulnerabilities affecting Debian.
Browse vulnerabilities for other tracked vendors.
Common questions about Debian vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new Debian vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
Track new Debian CVEs as they are disclosed and get AI-written analysis and remediation guidance.
Monitor Debian CVEs