Known vulnerabilities in Fedora 37

Software: Fedora
Version: 37
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1280
Public exploits: 52
Known exploited (KEV): 23

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 37 Fedora 37 is affected by 1280 vulnerabilities: 21 critical, 333 high, 604 medium, 322 low Critical High Medium Low

Vulnerabilities (1280)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116003 - Deserialization of Untrusted Data
CVE-2022-39379
CWE-502 Low
No
No
- 22.09.2025 SB2022110284
SB2025092257
SB2025092258
and 1 more
#VU114997 - NULL Pointer Dereference
CVE-2022-4121
CWE-476 Medium
No
No
- 09.09.2025 SB2023011791
SB2025090913
SB2022112357
and 2 more
#VU107614 - Improper input validation
CVE-2023-43669
CWE-20 High
No
No
- 18.04.2025 SB2023092163
SB2025041855
SB2023092407
and 3 more
#VU97654 - Out-of-bounds read
CVE-2022-46393
CWE-125 Medium
No
No
- 23.09.2024 SB2022121542
SB2024092358
SB2023010451
and 3 more
#VU97653 - Observable discrepancy
CVE-2022-46392
CWE-203 Low
No
No
- 23.09.2024 SB2022121542
SB2024092358
SB2023010451
and 3 more
#VU86948 - Resource exhaustion
CVE-2022-48064
CWE-400 Low
No
No
- 01.03.2024 SB2024011543
SB2023090907
SB2023090908
and 18 more
#VU129609 - Improper input validation
CVE-2023-45129
CWE-20 Low
No
No
- 10.10.2023 SB20231010105
SB2024010704
SB20231011104
and 2 more
#VU80034 - Unchecked Return Value
CVE-2022-40716
CWE-252 Low
No
No
- 28.08.2023 SB2022092687
SB2023082830
SB2023082831
and 6 more
#VU79748 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39335
CWE-200 Low
No
No
- 20.08.2023 SB20230820232
SB20230820233
SB2023090940
#VU79698 - Out-of-bounds read
CVE-2022-32325
CWE-125 Medium
No
No
- 18.08.2023 SB2022070116
SB2024041296
SB2023010526
and 1 more
#VU79630 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24439
CWE-94 High
No
No
- 16.08.2023 SB2022120650
SB20230816235
SB2023082070
and 12 more
#VU76839 - Server-Side Request Forgery (SSRF)
CVE-2022-29153
CWE-918 Medium
No
No
- 05.06.2023 SB2023060515
SB2023010241
SB2023091924
and 8 more
#VU129605 - Improper input validation
CVE-2023-32323
CWE-20 Low
No
No
- 24.05.2023 SB2023052450
SB2023090940
#VU129606 - Incorrect Authorization
CVE-2022-39374
CWE-863 Low
No
No
- 24.05.2023 SB2023052449
SB2023090940
#VU76062 - Incorrect Regular Expression
CVE-2022-21681
CWE-185 Medium
No
No
- 12.05.2023 SB2023051212
SB2022030934
SB2023061619
and 13 more
#VU76061 - Incorrect Regular Expression
CVE-2022-21680
CWE-185 Medium
No
No
- 12.05.2023 SB2023051212
SB2022030930
SB2023061619
and 11 more
#VU70238 - Out-of-bounds read
CVE-2022-42852
CWE-125 Medium
No
No
- 13.12.2022 SB2022121386
SB2022121387
SB2022121390
and 22 more
#VU70195 - Type confusion
CVE-2022-42856
CWE-843 Critical
No
Exploited
- 13.12.2022 SB2022121376
SB2022121386
SB2022121387
and 21 more
#VU69808 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-45939
CWE-78 High
No
No
- 01.12.2022 SB2022120142
SB2022120148
SB2022120149
and 23 more
#VU69422 - Exposure of sensitive information to an unauthorized actor
CVE-2022-3920
CWE-200 Medium
No
No
- 18.11.2022 SB2022111823
SB2023010241
SB2022121635
and 4 more


Showing elements 1 - 20 out of 1280