Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Debian Number Of NVD 8838 CRITICAL 973 HIGH 3883 MEDIUM 3639 LOW 343
URL https://www.debian.org/
Explanation It will be supported for about 5 years after release, including the LTS period.
After 5 years, you will need to use a company that provides paid support or update to a newer version.
Tag
  • Linux
Add Information URL
No Type Name URL
1 https://www.debian.org/releases/index.en.html
2 https://wiki.debian.org/LTS
3 https://www.debian.org/lts/security/
4 https://wiki.debian.org/DebianReleases
5 https://wiki.debian.org/LTS/Extended
6 https://www.debian.org/security/
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
141 Debian 12 12.7 Aug. 31, 2024 Jan. 1, 2023 7 149 115 10
142 Debian 11 11.11 Aug. 31, 2024 Aug. 14, 2021 124 641 478 23
143 Debian 10 10.13 Sept. 10, 2022 July 6, 2019 Aug. 31, 2022 326 1404 1210 111
144 Debian 9 9.13 July 18, 2020 June 17, 2017 June 30, 2022 569 1739 1553 134
145 Debian 8 8.0 April 25, 2015 June 17, 2018 June 30, 2020 498 1437 1431 106
146 Debian 7 7.1 May 4, 2013 April 25, 2016 May 31, 2018 112 494 587 62
147 Debian 5 5.0.9 Feb. 14, 2009 Feb. 6, 2012 5 70 85 25
148 Debian 4 4.0 April 8, 2007 Feb. 15, 2010 5 92 72 10
149 Debian 3 3.0.23 July 19, 2002 March 31, 2008 7 86 74 24
150 Debian 2 2.5.3-3 July 24, 1998 June 30, 2003 0 48 27 15
151 Debian 1 1.3.1 May 17, 1996 Jan. 1, 2000 365 1656 1388 115
152 Debian 0 0.93 Jan. 1, 1900 Jan. 1, 2000 0 8 1 1
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
141 8.8
- 		HIGH
Network 		Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via spe… CWE-416
 Use After Free 		CVE-2023-5855 cpe:2.3:o:debian:debian_linux:12.0:*
cpe:2.3:o:debian:debian_linux:11.0:* 		2024-11-21 17:42
2023-11-2 		Show GitHub Exploit DB Packet Storm
142 8.8
- 		HIGH
Network 		Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specifi… CWE-416
 Use After Free 		CVE-2023-5854 cpe:2.3:o:debian:debian_linux:12.0:*
cpe:2.3:o:debian:debian_linux:11.0:* 		2024-11-21 17:42
2023-11-2 		Show GitHub Exploit DB Packet Storm
143 4.3
- 		MEDIUM
Network 		Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) CWE-346
 Origin Validation Error 		CVE-2023-5853 cpe:2.3:o:debian:debian_linux:12.0:*
cpe:2.3:o:debian:debian_linux:11.0:* 		2024-11-21 17:42
2023-11-2 		Show GitHub Exploit DB Packet Storm
144 8.8
- 		HIGH
Network 		Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specifi… CWE-416
 Use After Free 		CVE-2023-5852 cpe:2.3:o:debian:debian_linux:12.0:*
cpe:2.3:o:debian:debian_linux:11.0:* 		2024-11-21 17:42
2023-11-2 		Show GitHub Exploit DB Packet Storm
145 4.3
- 		MEDIUM
Network 		Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) CWE-346
 Origin Validation Error 		CVE-2023-5851 cpe:2.3:o:debian:debian_linux:12.0:*
cpe:2.3:o:debian:debian_linux:11.0:* 		2024-11-21 17:42
2023-11-2 		Show GitHub Exploit DB Packet Storm
146 4.3
- 		MEDIUM
Network 		Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Medium) NVD-CWE-noinfo
CVE-2023-5850 cpe:2.3:o:debian:debian_linux:12.0:*
cpe:2.3:o:debian:debian_linux:11.0:* 		2024-11-21 17:42
2023-11-2 		Show GitHub Exploit DB Packet Storm
147 8.8
- 		HIGH
Network 		Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-190
 Integer Overflow or Wraparound 		CVE-2023-5849 cpe:2.3:o:debian:debian_linux:12.0:*
cpe:2.3:o:debian:debian_linux:11.0:* 		2024-11-21 17:42
2023-11-2 		Show GitHub Exploit DB Packet Storm
148 8.8
- 		HIGH
Network 		Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Hig… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2023-5482 cpe:2.3:o:debian:debian_linux:12.0:*
cpe:2.3:o:debian:debian_linux:11.0:* 		2024-11-21 17:41
2023-11-2 		Show GitHub Exploit DB Packet Storm
149 9.8
- 		CRITICAL
Network 		The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to … - CVE-2023-46604 cpe:2.3:o:debian:debian_linux:10.0:* 2025-03-7 04:48
2023-10-28 		Show GitHub Exploit DB Packet Storm
150 7.0
- 		HIGH
Local 		open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowi… NVD-CWE-noinfo
CVE-2023-34059 cpe:2.3:o:debian:debian_linux:12.0:*
cpe:2.3:o:debian:debian_linux:11.0:*
cpe:2.3:o:debian:debian_linux:10.0:* 		2025-03-7 01:15
2023-10-27 		Show GitHub Exploit DB Packet Storm