CVE security advisories and vulnerability history for glibc by gnu.
166
Total CVEs
Published
1
In CISA KEV
Exploited in the wild
52
Public exploits
PoC or exploit code
6.8
Avg CVSS
2000–2026
Last updated
Overview
gnu glibc has 166 published CVE records since 2000, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 52 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.
This page aggregates every publicly disclosed vulnerability (CVE) affecting gnu glibc, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include linux.
Severity and exploitation
How the CVSS severity of gnu glibc's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical23
High63
Medium71
Low9
In CISA’s Known Exploited Vulnerabilities catalog
1
One of gnu glibc's CVEs is confirmed exploited in the wild.
Public exploits
52
52 of gnu glibc's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every gnu glibc version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
2.1.1 <= v <= 2.1.133 CVEs
2.1 <= v <= 2.131 CVEs
2.1.2 <= v <= 2.1.231 CVEs
2.1.3 <= v <= 2.1.330 CVEs
2.1.1.6 <= v <= 2.1.1.629 CVEs
2.0.1 <= v <= 2.0.128 CVEs
2.0.6 <= v <= 2.0.628 CVEs
2.0 <= v <= 2.027 CVEs
2.0.2 <= v <= 2.0.227 CVEs
2.0.3 <= v <= 2.0.327 CVEs
2.0.4 <= v <= 2.0.427 CVEs
Common weakness types
The CWE weakness categories most often found in gnu glibc CVEs. Follow any weakness for its full explanation.
gnu glibc has 166 published CVE records since 2000.
How many gnu glibc CVEs are in CISA KEV?
Yes — 1 of gnu glibc's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for gnu glibc vulnerabilities?
Yes — 52 of gnu glibc's CVEs have a known public exploit.
Which versions of gnu glibc are affected?
176 distinct gnu glibc versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in gnu glibc CVEs?
gnu glibc's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-787 (Out-of-bounds Write), CWE-617 (Reachable Assertion), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')).
How many critical gnu glibc vulnerabilities are there?
gnu glibc has 23 critical and 63 high-severity CVEs.
What is the average severity of gnu glibc CVEs?
The average CVSS base score across gnu glibc's scored CVEs is 6.8.
