CVE Program partner

systemd

The systemd project

API
CVEs, 365 days33 all time, 0 rejected
Quality88%median 99%
CVSS by the CNA100%share of records
CWE66%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationThe systemd project
RoleCNA
TypeVendor, Open Source
Reports toredhat → mitre
ScopeAll components from the systemd project, including systemd, udev, systemd-journald, systemd-resolved, systemd-boot, systemd-stub, mkosi, and other components maintained on <a href='https://github.com/systemd' target='_blank'>https://github.com/systemd</a>.
Advisorieshttps://github.com/systemd/systemd/security/advisories?state=published

Latest CVEs · RSS

  • CVE-2026-15060 2026-08-10 · CVSS 4.7
    When systemd-machined >= v259 (or v258 with a custom `polkit` policy that allows `register-machine` access) is running on a desktop system, an unprivileged user
  • CVE-2026-16742 2026-08-10 · CVSS 6.7
    systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user
  • CVE-2026-15059 2026-08-10 · CVSS 5.5
    Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.

All CVE Program partners