Known vulnerabilities in Fedora

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 13399
Public exploits: 703
Known exploited (KEV): 179
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 13399 known vulnerabilities: 103 critical, 3545 high, 5272 medium, 4478 low Critical High Medium Low

Vulnerabilities (13399)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150196 - Inefficient Algorithmic Complexity
CVE-2026-85501
CWE-407 Medium
No
No
- 16.09.2026 SB2026091646
SB2026091655
SB2026091656
and 1 more
#VU150195 - Use After Free
CVE-2026-82720
CWE-416 Medium
No
No
- 16.09.2026 SB2026091646
SB2026091655
SB2026091656
and 1 more
#VU150194 - Heap-based Buffer Overflow
CVE-2026-82717
CWE-122 High
No
No
- 16.09.2026 SB2026091646
SB2026091655
SB2026091656
and 1 more
#VU150193 - Out-of-bounds write
CVE-2026-81642
CWE-787 High
No
No
- 16.09.2026 SB2026091646
SB2026091655
SB2026091656
and 1 more
#VU150192 - Heap-based Buffer Overflow
CVE-2026-81634
CWE-122 Low
No
No
- 16.09.2026 SB2026091646
SB2026091655
SB2026091656
and 1 more
#VU150191 - Resource exhaustion
CVE-2026-80225
CWE-400 Medium
No
No
- 16.09.2026 SB2026091646
SB2026091655
SB2026091656
and 1 more
#VU150190 - Use After Free
CVE-2026-78227
CWE-416 Medium
No
No
- 16.09.2026 SB2026091646
SB2026091655
SB2026091656
and 1 more
#VU150189 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-77955
CWE-362 Low
No
No
- 16.09.2026 SB2026091646
SB2026091655
SB2026091656
and 1 more
#VU148660 - Missing Authorization
CVE-2026-87429
CWE-862 Low
No
No
- 09.09.2026 SB2026090967
SB20260917202
SB20260917203
and 7 more
#VU148547 - Exposure of sensitive information to an unauthorized actor
CVE-2026-87658
CWE-200 Medium
No
No
- 09.09.2026 SB2026090967
SB20260917202
SB20260917203
and 7 more
#VU147412 - NULL Pointer Dereference
CVE-2026-85150
CWE-476 Medium
No
No
- 08.09.2026 SB2026090857
SB2026091068
SB20260919169
and 1 more
#VU147399 - Missing release of memory after effective lifetime
CVE-2026-62437
CWE-401 Low
No
No
- 08.09.2026 SB2026090845
SB2026090870
SB2026090871
and 3 more
#VU147398 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-79602
CWE-754 Low
No
No
- 08.09.2026 SB2026090845
SB2026090870
SB2026090871
and 3 more
#VU147397 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-79603
CWE-362 Low
No
No
- 08.09.2026 SB2026090845
SB2026090870
SB2026090871
and 2 more
#VU147396 - Resource exhaustion
CVE-2026-79604
CWE-400 Low
No
No
- 08.09.2026 SB2026090845
SB2026091802
#VU146786 - Uncaught Exception
CVE-2026-82417
CWE-248 Medium
No
No
- 02.09.2026 SB2026090291
SB2026092001
SB2026092002
and 3 more
#VU146785 - Allocation of Resources Without Limits or Throttling
CVE-2026-82562
CWE-770 Low
No
No
- 02.09.2026 SB2026090291
SB2026092001
SB2026092002
and 3 more
#VU145625 - Exposure of sensitive information to an unauthorized actor
CVE-2026-79220
CWE-200 Medium
No
No
- 26.08.2026 SB2026082632
SB2026083125
SB2026090430
and 6 more
#VU140846 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-75838
CWE-79 Low
No
No
- 04.08.2026 SB2026080415
SB2026092001
SB2026092002
and 3 more
#VU132289 - Resource exhaustion
CVE-2026-48988
CWE-400 Medium
No
No
- 25.05.2026 SB2026052543
SB2026092001
SB2026092002
and 3 more


Showing elements 1 - 20 out of 13399