Known vulnerabilities in Fedora

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 13358
Public exploits: 703
Known exploited (KEV): 179
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 13358 known vulnerabilities: 103 critical, 3539 high, 5250 medium, 4465 low Critical High Medium Low

Vulnerabilities (13358)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148982 - NULL Pointer Dereference
CVE-2026-2100
CWE-476 Low
No
No
- 11.09.2026 SB2026091125
SB2026091129
SB2026091130
#VU148896 - Incorrect Authorization
CVE-2026-19816
CWE-863 Low
No
No
- 10.09.2026 SB2026090759
SB2026091202
SB2026091203
#VU146822 - Uncontrolled Recursion
CVE-2026-58227
CWE-674 Medium
No
No
- 02.09.2026 SB20260902104
SB20260902107
SB20260902108
and 5 more
#VU146821 - Allocation of Resources Without Limits or Throttling
CVE-2026-59251
CWE-770 Medium
No
No
- 02.09.2026 SB20260902104
SB20260902108
SB20260902112
and 1 more
#VU145888 - Resource exhaustion
CVE-2026-80212
CWE-400 Medium
No
No
- 27.08.2026 SB2026082726
SB2026090515
SB2026090516
and 7 more
#VU145889 - Improper input validation
CVE-2026-80213
CWE-20 Medium
No
No
- 27.08.2026 SB2026082726
SB2026091009
SB2026091025
and 5 more
#VU140942 - Improper input validation
CVE-2026-15307
CWE-20 Low
No
No
- 05.08.2026 SB2026080503
SB2026080601
SB2026083039
and 6 more
#VU140943 - Resource exhaustion
CVE-2026-15337
CWE-400 Medium
No
No
- 05.08.2026 SB2026080503
SB2026080601
SB2026083039
and 8 more
#VU140944 - Uncontrolled Recursion
CVE-2026-15830
CWE-674 Medium
No
No
- 05.08.2026 SB2026080503
SB2026080601
SB2026083039
and 8 more
#VU140945 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-15920
CWE-79 Low
No
No
- 05.08.2026 SB2026080503
SB2026080601
SB2026083039
and 8 more
#VU140808 - Off-by-one Error
CVE-2026-57160
CWE-193 Medium
No
No
- 03.08.2026 SB2026080389
SB2026091201
SB20260912386
#VU136952 - Improper input validation
CVE-2026-63379
CWE-20 High
No
No
- 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 3 more
#VU136944 - Out-of-bounds read
CVE-2026-63383
CWE-125 Medium
No
No
- 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 4 more
#VU136943 - Integer overflow
CVE-2026-63384
CWE-190 Medium
No
No
- 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 4 more
#VU136940 - Stack-based buffer overflow
CVE-2026-63387
CWE-121 Medium
No
No
- 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 3 more
#VU136938 - Out-of-bounds write
CVE-2026-63388
CWE-787 Low
No
No
- 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 3 more
#VU135085 - Insufficiently Protected Credentials
CVE-2026-9079
CWE-522 Low
No
No
- 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 9 more
#VU135076 - Exposure of Data Element to Wrong Session
CVE-2026-8458
CWE-488 Low
No
No
- 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 10 more
#VU135073 - Improper Certificate Validation
CVE-2026-11564
CWE-295 Medium
No
No
- 24.06.2026 SB2026062427
SB2026071429
SB2026081995
and 5 more
#VU135070 - Use After Free
CVE-2026-10536
CWE-416 Low
No
No
- 24.06.2026 SB2026062427
SB2026071429
SB2026071466
and 10 more


Showing elements 1 - 20 out of 13358