Known vulnerabilities in Fedora 27

Software: Fedora
Version: 27
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1267
Public exploits: 76
Known exploited (KEV): 12

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 27 Fedora 27 is affected by 1267 vulnerabilities: 261 high, 193 medium, 813 low Critical High Medium Low

Vulnerabilities (1267)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111731 - NULL Pointer Dereference
CVE-2017-15120
CWE-476 Medium
No
No
- 21.06.2025 SB2018072724
SB2018052612
SB2018052613
#VU19264 - Authentication Bypass Using an Alternate Path or Channel
CVE-2018-3258
CWE-288 High
No
No
- 19.07.2019 SB2018101718
SB2018110121
SB2018110122
and 2 more
#VU16334 - Improper input validation
CVE-2018-19296
CWE-20 High
No
No
- 07.12.2018 SB2018120727
SB2018120728
SB2019061106
and 12 more
#VU16149 - Resource exhaustion
CVE-2018-19591
CWE-400 Low
No
No
- 28.11.2018 SB2018112808
SB2019031408
SB2019081555
and 6 more
#VU16007 - NULL Pointer Dereference
CVE-2018-19387
CWE-476 Low
No
No
- 21.11.2018 SB2018112119
SB2018112223
SB2018112224
and 1 more
#VU16009 - Cross-Site Request Forgery (CSRF)
CVE-2018-16854
CWE-352 Low
Public exploit available
No
- 21.11.2018 SB2018112206
SB2018112127
SB2018112128
and 2 more
#VU15907 - Exposure of sensitive information to an unauthorized actor
CVE-2018-19120
CWE-200 Low
No
No
- 14.11.2018 SB2018111505
SB2018111528
SB2018111529
and 1 more
#VU15745 - Resource Management Errors
CVE-2018-16843
CWE-399 Medium
No
No
- 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 9 more
#VU15744 - Resource Management Errors
CVE-2018-16844
CWE-399 Medium
No
No
- 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 9 more
#VU15743 - Out-of-bounds read
CVE-2018-16845
CWE-125 Medium
No
No
- 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 11 more
#VU33736 - Improper input validation
CVE-2018-3282
CWE-20 Medium
No
No
- 17.10.2018 SB2018101720
SB2019031415
SB2018120831
and 6 more
#VU15208 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-4345
CWE-79 Low
No
No
- 09.10.2018 SB2018100903
SB2018103052
SB2018103053
and 1 more
#VU11786 - Improper Access Control
CVE-2017-3589
CWE-284 Low
No
No
- 12.04.2018 SB2017051909
SB2018112829
#VU11785 - Improper Access Control
CVE-2017-3586
CWE-284 Low
No
No
- 12.04.2018 SB2017051909
SB2018112829
#VU11092 - Deserialization of Untrusted Data
CVE-2017-3523
CWE-502 High
No
No
- 15.03.2018 SB2017050310
SB2018112829
#VU33493 - Improper input validation
CVE-2018-1000003
CWE-20 Low
No
No
- 22.01.2018 SB2018012710
SB2018052612
SB2018052613
#VU9441 - Missing release of memory after effective lifetime
CVE-2017-15094
CWE-401 Medium
No
No
- 29.11.2017 SB2017112906
SB2017112907
SB2017121529
and 5 more
#VU9440 - Improper Access Control
CVE-2017-15093
CWE-284 Low
No
No
- 29.11.2017 SB2017112906
SB2017112907
SB2017121528
and 5 more
#VU9439 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-15092
CWE-79 Low
No
No
- 29.11.2017 SB2017112906
SB2017112907
SB2017121534
and 5 more
#VU9437 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2017-15090
CWE-300 Low
No
No
- 29.11.2017 SB2017112906
SB2017112907
SB2017121531
and 5 more


Showing elements 1 - 20 out of 1267