Login Request a demo
BU
Product
BusyBox
by Busybox · last CVE Oct 21, 2026
48
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities48In the news2Timeline
Severity mix
Critical 4High 20Medium 17Low 5
Severity
All severities48Critical4High20Medium17Low5
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add BusyBox to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-48174
9.8
3%
Aug 22
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35
Affected: through 1.36.1
CVE-2021-42377
9.8
4%
Nov 15
An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell…
Affected: 1.33.0; 1.33.1
CVE-2018-1000517
9.8
33%
Jun 26
BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can result in heap…
Affected: before 1.29.0
CVE-2016-2148
9.8
27%
Feb 9
Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing
Affected: through 1.24.2
Showing 4