Sploitus

37 exploited vulnerabilities in Systemd

Vulnerabilities with publicly known exploits

Vendors
Alt Linux, Centos, Red Hat, Suse, Canonical, Systemd
With known exploits
37
Affected Canonical Ubuntu Linux versions
= 16.04, 18.04, 18.10
Affected Debian Debian Linux versions
= 8.0, 10.0
Affected Systemd Project Systemd versions
< 244, 223, 242, 237, 228, 190, 259.3, 241, 257.13, 258.7, 259.5, 260, 245, 257.11, 258.5, 259.2, 251, 252, 250.2, 253, 246.15, 247.8, 248.5, 249.1, 239, 209, 213, 214, 229, 240, 252.37, 253.32, 254.25, 255.19, 256.14, 257.6, 259
Affected Linux Linux Kernel versions
< 5.4.300, 5.10.245, 5.15.194, 6.1.154, 6.6.108, 6.12.49, 6.16.9, 6.17
Affected Linux Systemd versions
= 43

Vulnerabilities with exploits

Highest CVSS first — 10 of these already have exploit code on Sploitus

CVE-2018-15686 4 exploits
CVSS 10.0 HIGH 2018-10-26FIX AVAILABLE
systemd - reexec State Injection Exploitsystemd - 'reexec' State Injection
CVE-2022-2526
CVSS 9.8 CRITICAL 2019-02-18
CVE-2018-21029
CVSS 9.8 CRITICAL 2019-10-30
CVE-2015-7510
CVSS 9.8 CRITICAL 2015-11-23
CVE-2023-26604 3 exploits
CVSS 7.8 HIGH 2020-11-27FIX AVAILABLE
systemd 246 Local Root Privilege Escalationsystemd 246 - Local Privilege Escalation Vulnerability
CVE-2019-3843 1 exploit
CVSS 7.8 HIGH 2019-04-19
systemd - DynamicUser can Create setuid Binaries when Assisted by Another Process
CVE-2019-3844 3 exploits
CVSS 7.8 HIGH 2019-04-19
systemd DynamicUser SetUID Binary Creation Exploitsystemd - DynamicUser can Create setuid Binaries when Assisted by Another Process
CVE-2018-15687 4 exploits
CVSS 7.8 HIGH 2018-10-26FIX AVAILABLE
systemd - chown_one() can Dereference Symlinks Exploitsystemd - 'chown_one()' Dereference Symlinks
CVE-2017-18078 3 exploits
CVSS 7.8 HIGH 2018-01-29FIX AVAILABLE
systemd (systemd-tmpfiles) < 236 - fs.protected_hardlinks=0 Local Privilege Escalation Vulnerabilsystemd Local Privilege Escalation
CVE-2018-6954
CVSS 7.8 HIGH 2018-01-24FIX AVAILABLE
CVE-2016-10156 4 exploits
CVSS 7.8 HIGH 2016-03-11FIX AVAILABLE
Systemd 228 Privilege EscalationSystemd 228 - Privilege Escalation Vulnerability
CVE-2026-32606
CVSS 7.6 HIGH 2026-03-16FIX AVAILABLE
CVE-2013-4391
CVSS 7.5 HIGH 2013-10-28
CVE-2026-40224
CVSS 7.3 HIGH 2026-04-10FIX AVAILABLE
CVE-2025-2515
CVSS 7.2 HIGH 2025-12-24
CVE-2019-3842 3 exploits
CVSS 7.0 HIGH 2019-01-23FIX AVAILABLE
systemd - Lack of Seat Verification in PAM Module Permits Spoofing Active Session to polkitsystemd Seat Verification Active Session Spoofing
CVE-2026-40225
CVSS 6.4 MEDIUM 2026-03-23FIX AVAILABLE
CVE-2026-40227
CVSS 6.2 MEDIUM 2026-04-10FIX AVAILABLE
CVE-2020-13529 1 exploit
CVSS 6.1 MEDIUM 2020-03-24
Master_Librarian - A Simple Tool To Audit Unix/*BSD/Linux System Libraries To Find Public Security Vulnerabilities
CVE-2026-40223
CVSS 5.5 MEDIUM 2026-04-10FIX AVAILABLE
CVE-2026-29111
CVSS 5.5 MEDIUM 2026-03-23FIX AVAILABLE
CVE-2025-39953
CVSS 5.5 MEDIUM 2025-10-04
CVE-2022-45873
CVSS 5.5 MEDIUM 2022-10-18FIX AVAILABLE
CVE-2022-3821
CVSS 5.5 MEDIUM 2022-07-08
CVE-2021-3997
CVSS 5.5 MEDIUM 2022-01-10
CVE-2022-4415
CVSS 5.5 MEDIUM 2022-12-21FIX AVAILABLE
CVE-2021-33910 1 exploit
CVSS 5.5 MEDIUM 2021-06-09FIX AVAILABLE
Sequoia: A Deep Root In Linux's Filesystem Layer
CVE-2019-6454
CVSS 5.5 MEDIUM 2019-01-01FIX AVAILABLE
CVE-2016-7796
CVSS 5.5 MEDIUM 2014-09-12
CVE-2016-7795
CVSS 5.5 MEDIUM 2016-09-29FIX AVAILABLE
CVE-2023-31439
CVSS 5.3 MEDIUM 2023-06-13FIX AVAILABLE
CVE-2023-31438
CVSS 5.3 MEDIUM 2023-06-13
CVE-2023-31437
CVSS 5.3 MEDIUM 2023-06-13FIX AVAILABLE
CVE-2019-15718
CVSS 4.9 MEDIUM 2019-02-18FIX AVAILABLE
CVE-2025-4598
CVSS 4.7 MEDIUM 2025-01-01FIX AVAILABLE
CVE-2026-40228
CVSS 3.3 LOW 2026-04-10FIX AVAILABLE
CVE-2012-1174
CVSS 3.3 LOW 2012-07-12FIX AVAILABLE