# Gnu vulnerabilities > Gnu has 1,130 published vulnerabilities across 130 products in our catalogue. 4 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Binutils, with 252. If you run Gnu software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/gnu ## At a glance - **Published vulnerabilities:** 1,130 - **Known to be exploited:** 4 - **Products:** 130 - **Versions:** 3,773 - **Most recently added to the known-exploited list:** [CVE-2014-6278](https://www.precursorintelligence.com/what-is/cve-2014-6278), 2 October 2025. We keep watching the list. ## Which Gnu products have the most vulnerabilities? - [Binutils](https://www.precursorintelligence.com/product/gnu/binutils): 252 published vulnerabilities, 77 versions - [Glibc](https://www.precursorintelligence.com/product/gnu/glibc): 149 published vulnerabilities, 183 versions - [Libredwg](https://www.precursorintelligence.com/product/gnu/libredwg): 87 published vulnerabilities, 698 versions - [Gnutls](https://www.precursorintelligence.com/product/gnu/gnutls): 69 published vulnerabilities, 367 versions - [Mailman](https://www.precursorintelligence.com/product/gnu/mailman): 47 published vulnerabilities, 76 versions - [Grub2](https://www.precursorintelligence.com/product/gnu/grub2): 43 published vulnerabilities, 10 versions - [Emacs](https://www.precursorintelligence.com/product/gnu/emacs): 35 published vulnerabilities, 109 versions - [Ncurses](https://www.precursorintelligence.com/product/gnu/ncurses): 27 published vulnerabilities, 20 versions - [Wget](https://www.precursorintelligence.com/product/gnu/wget): 19 published vulnerabilities, 46 versions - [Bash](https://www.precursorintelligence.com/product/gnu/bash): 18 published vulnerabilities, 39 versions Each product page lists its own known-exploited flaws. ## Which Gnu vulnerabilities are being exploited? 4 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2014-6278](https://www.precursorintelligence.com/what-is/cve-2014-6278): GNU Bash OS Command Injection Vulnerability. High, CVSS 8.8, chance of use in 30 days >99%, known exploited since 2 October 2025. - [CVE-2023-4911](https://www.precursorintelligence.com/what-is/cve-2023-4911): GNU C Library Buffer Overflow Vulnerability. High, CVSS 7.8, chance of use in 30 days 64%, known exploited since 21 November 2023. - [CVE-2014-6271](https://www.precursorintelligence.com/what-is/cve-2014-6271): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 28 January 2022. - [CVE-2014-7169](https://www.precursorintelligence.com/what-is/cve-2014-7169): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 28 January 2022. ## Which Gnu flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2014-6271](https://www.precursorintelligence.com/what-is/cve-2014-6271): >99%, Critical (CVSS 9.8), known exploited - [CVE-2014-7169](https://www.precursorintelligence.com/what-is/cve-2014-7169): >99%, Critical (CVSS 9.8), known exploited - [CVE-2014-6278](https://www.precursorintelligence.com/what-is/cve-2014-6278): >99%, High (CVSS 8.8), known exploited - [CVE-1999-0016](https://www.precursorintelligence.com/what-is/cve-1999-0016): 96%, Medium (CVSS 5.0) - [CVE-2015-0235](https://www.precursorintelligence.com/what-is/cve-2015-0235): 95%, Critical (CVSS 10.0) - [CVE-2015-7547](https://www.precursorintelligence.com/what-is/cve-2015-7547): 91%, High (CVSS 8.1) - [CVE-1999-0612](https://www.precursorintelligence.com/what-is/cve-1999-0612): 68%, Not rated (CVSS 0.0) ## All Gnu products we track 123 products with at least one tracked version, most vulnerabilities first: - [Binutils](https://www.precursorintelligence.com/product/gnu/binutils): 252 vulnerabilities, 77 versions - [Glibc](https://www.precursorintelligence.com/product/gnu/glibc): 149 vulnerabilities, 183 versions - [Libredwg](https://www.precursorintelligence.com/product/gnu/libredwg): 87 vulnerabilities, 698 versions - [Gnutls](https://www.precursorintelligence.com/product/gnu/gnutls): 69 vulnerabilities, 367 versions - [Mailman](https://www.precursorintelligence.com/product/gnu/mailman): 47 vulnerabilities, 76 versions - [Grub2](https://www.precursorintelligence.com/product/gnu/grub2): 43 vulnerabilities, 10 versions - [Emacs](https://www.precursorintelligence.com/product/gnu/emacs): 35 vulnerabilities, 109 versions - [Ncurses](https://www.precursorintelligence.com/product/gnu/ncurses): 27 vulnerabilities, 20 versions - [Wget](https://www.precursorintelligence.com/product/gnu/wget): 19 vulnerabilities, 46 versions - [Bash](https://www.precursorintelligence.com/product/gnu/bash): 18 vulnerabilities, 39 versions - [Tar](https://www.precursorintelligence.com/product/gnu/tar): 16 vulnerabilities, 41 versions - [Pspp](https://www.precursorintelligence.com/product/gnu/pspp): 15 vulnerabilities, 36 versions - [Gcc](https://www.precursorintelligence.com/product/gnu/gcc): 14 vulnerabilities, 128 versions - [Libextractor](https://www.precursorintelligence.com/product/gnu/libextractor): 13 vulnerabilities, 20 versions - [Patch](https://www.precursorintelligence.com/product/gnu/patch): 13 vulnerabilities, 12 versions - [Recutils](https://www.precursorintelligence.com/product/gnu/recutils): 13 vulnerabilities, 11 versions - [Cpio](https://www.precursorintelligence.com/product/gnu/cpio): 12 vulnerabilities, 16 versions - [Libtasn1](https://www.precursorintelligence.com/product/gnu/libtasn1): 12 vulnerabilities, 84 versions - [Gzip](https://www.precursorintelligence.com/product/gnu/gzip): 11 vulnerabilities, 26 versions - [Groff](https://www.precursorintelligence.com/product/gnu/groff): 11 vulnerabilities, 16 versions - [Coreutils](https://www.precursorintelligence.com/product/gnu/coreutils): 10 vulnerabilities, 62 versions - [Privacy Guard](https://www.precursorintelligence.com/product/gnu/privacy_guard): 10 vulnerabilities, 35 versions - [Screen](https://www.precursorintelligence.com/product/gnu/screen): 9 vulnerabilities, 30 versions - [Gdb](https://www.precursorintelligence.com/product/gnu/gdb): 9 vulnerabilities, 75 versions - [Mailutils](https://www.precursorintelligence.com/product/gnu/mailutils): 8 vulnerabilities, 4 versions - [Adns](https://www.precursorintelligence.com/product/gnu/adns): 8 vulnerabilities, 14 versions - [Gnump3d](https://www.precursorintelligence.com/product/gnu/gnump3d): 7 vulnerabilities, 19 versions - [Cfengine](https://www.precursorintelligence.com/product/gnu/cfengine): 6 vulnerabilities, 18 versions - [Radius](https://www.precursorintelligence.com/product/gnu/radius): 6 vulnerabilities, 8 versions - [A2ps](https://www.precursorintelligence.com/product/gnu/a2ps): 5 vulnerabilities, 6 versions - [Enscript](https://www.precursorintelligence.com/product/gnu/enscript): 5 vulnerabilities, 12 versions - [Inetutils](https://www.precursorintelligence.com/product/gnu/inetutils): 5 vulnerabilities, 23 versions - [Libidn](https://www.precursorintelligence.com/product/gnu/libidn): 5 vulnerabilities, 70 versions - [Org Mode](https://www.precursorintelligence.com/product/gnu/org_mode): 5 vulnerabilities, 387 versions - [Osip](https://www.precursorintelligence.com/product/gnu/osip): 5 vulnerabilities, 22 versions - [Sharutils](https://www.precursorintelligence.com/product/gnu/sharutils): 5 vulnerabilities, 3 versions - [Cflow](https://www.precursorintelligence.com/product/gnu/cflow): 4 vulnerabilities, 3 versions - [Chess](https://www.precursorintelligence.com/product/gnu/chess): 4 vulnerabilities, 19 versions - [Fribidi](https://www.precursorintelligence.com/product/gnu/fribidi): 4 vulnerabilities, 17 versions - [Aspell](https://www.precursorintelligence.com/product/gnu/aspell): 4 vulnerabilities, 5 versions - [Inet](https://www.precursorintelligence.com/product/gnu/inet): 4 vulnerabilities, 3 versions - [Hurd](https://www.precursorintelligence.com/product/gnu/hurd): 4 vulnerabilities, 1 version - [Libmicrohttpd](https://www.precursorintelligence.com/product/gnu/libmicrohttpd): 4 vulnerabilities, 61 versions - [Libcdio](https://www.precursorintelligence.com/product/gnu/libcdio): 4 vulnerabilities, 39 versions - [Ed](https://www.precursorintelligence.com/product/gnu/ed): 4 vulnerabilities, 13 versions - [Libidn2](https://www.precursorintelligence.com/product/gnu/libidn2): 4 vulnerabilities, 23 versions - [Gnash](https://www.precursorintelligence.com/product/gnu/gnash): 3 vulnerabilities, 5 versions - [Gnats](https://www.precursorintelligence.com/product/gnu/gnats): 3 vulnerabilities, 9 versions - [Fileutils](https://www.precursorintelligence.com/product/gnu/fileutils): 3 vulnerabilities, 5 versions - [Gnubiff](https://www.precursorintelligence.com/product/gnu/gnubiff): 3 vulnerabilities, 10 versions - [Phpbook](https://www.precursorintelligence.com/product/gnu/phpbook): 3 vulnerabilities, 6 versions - [Less](https://www.precursorintelligence.com/product/gnu/less): 3 vulnerabilities, 4 versions - [Zebra](https://www.precursorintelligence.com/product/gnu/zebra): 3 vulnerabilities, 5 versions - [Fingerd](https://www.precursorintelligence.com/product/gnu/fingerd): 3 vulnerabilities, 1 version - [Xemacs](https://www.precursorintelligence.com/product/gnu/xemacs): 3 vulnerabilities, 1 version - [Nano](https://www.precursorintelligence.com/product/gnu/nano): 3 vulnerabilities, 228 versions - [Grub](https://www.precursorintelligence.com/product/gnu/grub): 2 vulnerabilities, 1 version - [Gettext](https://www.precursorintelligence.com/product/gnu/gettext): 2 vulnerabilities, 46 versions - [Gnu Scientific Library](https://www.precursorintelligence.com/product/gnu/gnu_scientific_library): 2 vulnerabilities, 2 versions - [Gnu Screen](https://www.precursorintelligence.com/product/gnu/gnu_screen): 2 vulnerabilities, 1 version - [Findutils](https://www.precursorintelligence.com/product/gnu/findutils): 2 vulnerabilities, 5 versions - [Gpgme](https://www.precursorintelligence.com/product/gnu/gpgme): 2 vulnerabilities, 3 versions - [Grep](https://www.precursorintelligence.com/product/gnu/grep): 2 vulnerabilities, 24 versions - [Guile](https://www.precursorintelligence.com/product/gnu/guile): 2 vulnerabilities, 1 version - [Guix](https://www.precursorintelligence.com/product/gnu/guix): 2 vulnerabilities, 24 versions - [Gv](https://www.precursorintelligence.com/product/gnu/gv): 2 vulnerabilities, 10 versions - [Indent](https://www.precursorintelligence.com/product/gnu/indent): 2 vulnerabilities, 1 version - [Anubis](https://www.precursorintelligence.com/product/gnu/anubis): 2 vulnerabilities, 5 versions - [Libtool](https://www.precursorintelligence.com/product/gnu/libtool): 2 vulnerabilities, 27 versions - [Lsh](https://www.precursorintelligence.com/product/gnu/lsh): 2 vulnerabilities, 4 versions - [M4](https://www.precursorintelligence.com/product/gnu/m4): 2 vulnerabilities, 10 versions - [Cvs](https://www.precursorintelligence.com/product/gnu/cvs): 2 vulnerabilities, 10 versions - [Bison](https://www.precursorintelligence.com/product/gnu/bison): 2 vulnerabilities, 3 versions - [Automake](https://www.precursorintelligence.com/product/gnu/automake): 2 vulnerabilities, 47 versions - [Texinfo](https://www.precursorintelligence.com/product/gnu/texinfo): 2 vulnerabilities, 1 version - [Grub Legacy](https://www.precursorintelligence.com/product/gnu/grub_legacy): 1 vulnerability, 9 versions - [Libgfortran](https://www.precursorintelligence.com/product/gnu/libgfortran): 1 vulnerability, 1 version - [Ibackup](https://www.precursorintelligence.com/product/gnu/ibackup): 1 vulnerability, 1 version - [Iceweasel](https://www.precursorintelligence.com/product/gnu/iceweasel): 1 vulnerability, 1 version - [Serveez](https://www.precursorintelligence.com/product/gnu/serveez): 1 vulnerability, 1 version - [Escript](https://www.precursorintelligence.com/product/gnu/escript): 1 vulnerability, 1 version - [Userv](https://www.precursorintelligence.com/product/gnu/userv): 1 vulnerability, 1 version - [Ksymoops](https://www.precursorintelligence.com/product/gnu/ksymoops): 1 vulnerability, 3 versions - [Guixsd](https://www.precursorintelligence.com/product/gnu/guixsd): 1 vulnerability, 22 versions - [Libc](https://www.precursorintelligence.com/product/gnu/libc): 1 vulnerability, 3 versions - [Exosip](https://www.precursorintelligence.com/product/gnu/exosip): 1 vulnerability, 5 versions - [Grub 2](https://www.precursorintelligence.com/product/gnu/grub_2): 1 vulnerability, 1 version - [Flash Player](https://www.precursorintelligence.com/product/gnu/flash_player): 1 vulnerability, 1 version - [Libopts](https://www.precursorintelligence.com/product/gnu/libopts): 1 vulnerability, 6 versions - [Libssp](https://www.precursorintelligence.com/product/gnu/libssp): 1 vulnerability, 2 versions - [Data Display Debugger](https://www.precursorintelligence.com/product/gnu/data_display_debugger): 1 vulnerability, 1 version - [Libtool-Ltdl](https://www.precursorintelligence.com/product/gnu/libtool-ltdl): 1 vulnerability, 1 version - [Flim](https://www.precursorintelligence.com/product/gnu/flim): 1 vulnerability, 1 version - [Tramp](https://www.precursorintelligence.com/product/gnu/tramp): 1 vulnerability, 1 version - [Gimp](https://www.precursorintelligence.com/product/gnu/gimp): 1 vulnerability, 2 versions - [Classpath](https://www.precursorintelligence.com/product/gnu/classpath): 1 vulnerability, 24 versions - [Make](https://www.precursorintelligence.com/product/gnu/make): 1 vulnerability, 2 versions - [Gnusound](https://www.precursorintelligence.com/product/gnu/gnusound): 1 vulnerability, 1 version - [Gnu Sasl](https://www.precursorintelligence.com/product/gnu/gnu_sasl): 1 vulnerability, 39 versions - [Gnu Patch](https://www.precursorintelligence.com/product/gnu/gnu_patch): 1 vulnerability, 4 versions - [Gnumeric](https://www.precursorintelligence.com/product/gnu/gnumeric): 1 vulnerability, 1 version - G++: 1 vulnerability, 1 version - [Gnumail](https://www.precursorintelligence.com/product/gnu/gnumail): 1 vulnerability, 1 version - [Gnulib](https://www.precursorintelligence.com/product/gnu/gnulib): 1 vulnerability, 1 version - [Gama](https://www.precursorintelligence.com/product/gnu/gama): 1 vulnerability, 1 version - [Binutils Gold](https://www.precursorintelligence.com/product/gnu/binutils_gold): 1 vulnerability, 2 versions - [Punbb](https://www.precursorintelligence.com/product/gnu/punbb): 1 vulnerability, 14 versions - [Queue](https://www.precursorintelligence.com/product/gnu/queue): 1 vulnerability, 6 versions - [Readline](https://www.precursorintelligence.com/product/gnu/readline): 1 vulnerability, 15 versions - [Realtime Linux Security Module](https://www.precursorintelligence.com/product/gnu/realtime_linux_security_module): 1 vulnerability, 1 version - [Rsync](https://www.precursorintelligence.com/product/gnu/rsync): 1 vulnerability, 1 version - [Rush](https://www.precursorintelligence.com/product/gnu/rush): 1 vulnerability, 1 version - [Global](https://www.precursorintelligence.com/product/gnu/global): 1 vulnerability, 1 version - [Libgomp](https://www.precursorintelligence.com/product/gnu/libgomp): 0 vulnerabilities, 1 version - [Sed](https://www.precursorintelligence.com/product/gnu/sed): 0 vulnerabilities, 31 versions - [Zlib](https://www.precursorintelligence.com/product/gnu/zlib): 0 vulnerabilities, 22 versions - [Libunistring](https://www.precursorintelligence.com/product/gnu/libunistring): 0 vulnerabilities, 13 versions - [Gnutls Libtasn1](https://www.precursorintelligence.com/product/gnu/gnutls_libtasn1): 0 vulnerabilities, 1 version - [Lightning](https://www.precursorintelligence.com/product/gnu/lightning): 0 vulnerabilities, 15 versions - [Diffutils](https://www.precursorintelligence.com/product/gnu/diffutils): 0 vulnerabilities, 12 versions - [Bc](https://www.precursorintelligence.com/product/gnu/bc): 0 vulnerabilities, 8 versions - [Icecat](https://www.precursorintelligence.com/product/gnu/icecat): 0 vulnerabilities, 3 versions - [Aspell Dictionary](https://www.precursorintelligence.com/product/gnu/aspell_dictionary): 0 vulnerabilities, 1 version ## Questions ### How many vulnerabilities does Gnu have? Our catalogue lists 1,130 published vulnerabilities across 130 products and 3,773 versions from Gnu. The most recent Gnu flaw added to the known-exploited list is CVE-2014-6278, on 2 October 2025. ### Which Gnu vulnerabilities are being exploited? 4 Gnu vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2014-6278, CVE-2023-4911 and CVE-2014-6271. The full list is on this page. ### Which Gnu product has the most vulnerabilities? Binutils, with 252 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Gnu vulnerabilities? Create a Precursor Intelligence account and track the Gnu products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Gnu? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact