Known vulnerabilities in Fedora

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 13637
Public exploits: 705
Known exploited (KEV): 182
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 13637 known vulnerabilities: 104 critical, 3625 high, 5337 medium, 4570 low Critical High Medium Low

Vulnerabilities (13637)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153883 - Inefficient Algorithmic Complexity
CVE-2026-84429
CWE-407 Medium
No
No
- 07.10.2026 SB20261007221
SB2026100851
SB2026100852
and 3 more
#VU153884 - Server-Side Request Forgery (SSRF)
CVE-2026-87890
CWE-918 Medium
No
No
- 07.10.2026 SB20261007221
SB2026100851
SB2026100852
and 3 more
#VU153885 - Incorrect Authorization
CVE-2026-87975
CWE-863 Medium
No
No
- 07.10.2026 SB20261007221
SB2026100851
SB2026100852
and 3 more
#VU153882 - Allocation of Resources Without Limits or Throttling
CVE-2026-77050
CWE-770 Medium
No
No
- 07.10.2026 SB20261007221
SB2026100851
SB2026100852
and 3 more
#VU153210 - Exposure of sensitive information to an unauthorized actor
CVE-2026-103627
CWE-200 Medium
No
No
- 02.10.2026 SB2026100275
SB2026100623
SB2026100624
and 6 more
#VU153208 - Use After Free
CVE-2026-103623
CWE-416 High
No
No
- 02.10.2026 SB2026100275
SB2026100623
SB2026100624
and 6 more
#VU153207 - Use After Free
CVE-2026-103622
CWE-416 High
No
No
- 02.10.2026 SB2026100275
SB2026100623
SB2026100624
and 6 more
#VU153204 - Type confusion
CVE-2026-103625
CWE-843 High
No
No
- 02.10.2026 SB2026100275
SB2026100623
SB2026100624
and 6 more
#VU153205 - Use After Free
CVE-2026-103624
CWE-416 High
No
No
- 02.10.2026 SB2026100275
SB2026100623
SB2026100624
and 5 more
#VU153202 - Integer overflow
CVE-2026-103621
CWE-190 High
No
No
- 02.10.2026 SB2026100275
SB2026100623
SB2026100624
and 6 more
#VU153201 - Improper Authorization
CVE-2026-103626
CWE-285 Medium
No
No
- 02.10.2026 SB2026100275
SB2026100623
SB2026100624
and 5 more
#VU152755 - Out-of-bounds write
CVE-2026-94054
CWE-787 Low
No
No
- 29.09.2026 SB2026092936
SB2026092938
SB2026093002
and 4 more
#VU152756 - Use After Free
CVE-2026-94055
CWE-416 Medium
No
No
- 29.09.2026 SB2026092936
SB2026093002
SB2026100648
and 3 more
#VU152757 - Use of Uninitialized Variable
CVE-2026-94056
CWE-457 Low
No
No
- 29.09.2026 SB2026092936
SB2026092938
SB2026093002
and 4 more
#VU152758 - Improper input validation
CVE-2026-94057
CWE-20 Low
No
No
- 29.09.2026 SB2026092936
SB2026092938
SB2026093002
and 4 more
#VU146685 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2026-13608
CWE-923 Medium
No
No
- 02.09.2026 SB2026090233
SB2026090401
SB20260907132
and 7 more
#VU146682 - Use After Free
CVE-2026-80229
CWE-416 Low
No
No
- 02.09.2026 SB2026090233
SB2026090401
SB20260907132
and 6 more
#VU146681 - Improper Certificate Validation
CVE-2026-80230
CWE-295 Low
No
No
- 02.09.2026 SB2026090233
SB2026090401
SB20260907132
and 9 more
#VU146679 - Insertion of Sensitive Information Into Sent Data
CVE-2026-80255
CWE-201 Medium
No
No
- 02.09.2026 SB2026090233
SB2026093019
SB2026100631
and 2 more
#VU143937 - Improper Access Control
CVE-2026-67420
CWE-284 Low
No
No
- 18.08.2026 SB2026081823
SB2026100961


Showing elements 1 - 20 out of 13637