- How many CVEs does Linux Foundation have?
- Linux Foundation has 622 published CVE records since 2011, including 273 in the last two years.
- How many Linux Foundation CVEs are in CISA KEV?
- Yes — 4 of Linux Foundation's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which Linux Foundation products have the most CVEs?
- The Linux Foundation products with the most published CVEs are yocto, backstage, nats-server, pytorch, everest.
- What are the most common weakness types in Linux Foundation CVEs?
- Linux Foundation's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-476 (NULL Pointer Dereference).
- Are there public exploits for Linux Foundation vulnerabilities?
- Yes — 170 of Linux Foundation's CVEs have a known public exploit.
- How many critical Linux Foundation vulnerabilities are there?
- Linux Foundation has 55 critical and 245 high-severity CVEs.
- What is the average severity of Linux Foundation CVEs?
- The average CVSS base score across Linux Foundation's scored CVEs is 6.8.