How many CVEs does freedesktop.org have?

freedesktop.org has 156 published CVE records since 2007, including 17 in the last two years.

How many freedesktop.org CVEs are in CISA KEV?

Yes — 2 of freedesktop.org's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which freedesktop.org products have the most CVEs?

The freedesktop.org products with the most published CVEs are Poppler, dbus, xdg-utils, udisks, libinput.

What are the most common weakness types in freedesktop.org CVEs?

freedesktop.org's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-674 (Uncontrolled Recursion), CWE-20 (Improper Input Validation), CWE-190 (Integer Overflow or Wraparound).

How many critical freedesktop.org vulnerabilities are there?

freedesktop.org has 7 critical and 51 high-severity CVEs.

What is the average severity of freedesktop.org CVEs?

The average CVSS base score across freedesktop.org's scored CVEs is 6.3.

freedesktop.org Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: freedesktop.org vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

freedesktop.org has 156 published CVE records since 2007, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 22 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting freedesktop.org products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on freedesktop.org's vulnerability posture, as a share of its 156 published CVEs.

Average CVSS: 6.3
Critical / high: 37%
Actively exploited (KEV): 1%
Public exploit available: 14%
Patch available: 95%

Severity and exploitation

How the CVSS severity of freedesktop.org's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical7

High51

Medium79

Low19

In CISA’s Known Exploited Vulnerabilities catalog

2 of freedesktop.org's CVEs are confirmed exploited in the wild.

Public exploits

22 of freedesktop.org's CVEs have a known public exploit available.

Most affected products

The freedesktop.org products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in freedesktop.org CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish freedesktop.org CVE records.

Disclosure activity by year

How many freedesktop.org CVEs were published each year.

2019

2020

2021

2022

2023

2024

2025

Latest freedesktop.org CVEs

The most recently disclosed vulnerabilities affecting freedesktop.org.

libslirp TCP URG OOB Read Information Leak
CWE-125
Medium · CVSS 6.5
EPSS 0.2%2026-06-24
Critical vulnerability · 2026-06-04
CWE-93
Critical · CVSS 9.8
EPSS 0.3%2026-06-04
Critical vulnerability · 2026-05-14
CWE-369
Critical · CVSS 9.1
EPSS 0.2%2026-05-14
Medium vulnerability · 2026-05-14
CWE-369

Other vendors

Browse vulnerabilities for other tracked vendors.

F5 Networks157 CVEs Grafana157 CVEs WPDeveloper157 CVEs axiosys156 CVEs Metagauss156 CVEs Silicon Labs156 CVEs CODESYS155 CVEs thorsten155 CVEs

Browse all vendors

Frequently asked questions

Common questions about freedesktop.org vulnerabilities.

How many CVEs does freedesktop.org have?: freedesktop.org has 156 published CVE records since 2007, including 17 in the last two years.
How many freedesktop.org CVEs are in CISA KEV?: Yes — 2 of freedesktop.org's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which freedesktop.org products have the most CVEs?: The freedesktop.org products with the most published CVEs are Poppler, dbus, xdg-utils, udisks, libinput.
What are the most common weakness types in freedesktop.org CVEs?: freedesktop.org's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-674 (Uncontrolled Recursion), CWE-20 (Improper Input Validation), CWE-190 (Integer Overflow or Wraparound).
Are there public exploits for freedesktop.org vulnerabilities?: Yes — 22 of freedesktop.org's CVEs have a known public exploit.
How many critical freedesktop.org vulnerabilities are there?: freedesktop.org has 7 critical and 51 high-severity CVEs.
What is the average severity of freedesktop.org CVEs?: The average CVSS base score across freedesktop.org's scored CVEs is 6.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track freedesktop.org vulnerabilities

Monitor new freedesktop.org vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing