Known vulnerabilities in Fedora 40 - page 18

Software: Fedora
Version: 40
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1148
Public exploits: 68
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 40 Fedora 40 is affected by 1148 vulnerabilities: 14 critical, 368 high, 449 medium, 317 low Critical High Medium Low

Vulnerabilities (1148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101063 - Out-of-bounds read
CVE-2024-42333
CWE-125 Low
No
No
- 01.12.2024 SB2024120101
SB2024120103
SB2024120104
and 2 more
#VU101032 - Command injection
CVE-2024-53899
CWE-77 Low
No
No
- 28.11.2024 SB2024112869
SB2024112872
SB2024112873
and 18 more
#VU101026 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-52336
CWE-94 Low
No
No
- 28.11.2024 SB2024112824
SB2024112828
SB2024112842
and 8 more
#VU101024 - Improper Output Neutralization for Logs
CVE-2024-52337
CWE-117 Low
No
No
- 28.11.2024 SB2024112824
SB2024112827
SB2024112828
and 20 more
#VU100967 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-11708
CWE-362 Low
No
No
- 26.11.2024 SB2024112669
SB2024112671
SB2024112870
and 5 more
#VU100966 - NULL Pointer Dereference
CVE-2024-11706
CWE-476 Low
No
No
- 26.11.2024 SB2024112669
SB2024112671
SB2024112870
and 5 more
#VU100965 - NULL Pointer Dereference
CVE-2024-11705
CWE-476 Low
No
No
- 26.11.2024 SB2024112669
SB2024112671
SB2024112870
and 5 more
#VU100964 - Double Free
CVE-2024-11704
CWE-415 Medium
No
No
- 26.11.2024 SB2024112669
SB2024112671
SB2024112870
and 15 more
#VU100961 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-11701
CWE-451 Medium
No
No
- 26.11.2024 SB2024112669
SB2024112671
SB2024112870
and 5 more
#VU100959 - Memory corruption
CVE-2024-11699
CWE-119 High
No
No
- 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100958 - Insufficient UI Warning of Dangerous Operations
CVE-2024-11698
CWE-357 Medium
No
No
- 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 9 more
#VU100957 - Data Handling
CVE-2024-11697
CWE-19 Low
No
No
- 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 43 more
#VU100956 - Error Handling
CVE-2024-11696
CWE-388 Medium
No
No
- 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100955 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-11695
CWE-451 Medium
No
No
- 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100954 - Insufficient UI Warning of Dangerous Operations
CVE-2024-11693
CWE-357 Medium
No
No
- 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 12 more
#VU100953 - Insufficient UI Warning of Dangerous Operations
CVE-2024-11692
CWE-357 Low
No
No
- 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 43 more
#VU100952 - Security Features
CVE-2024-11694
CWE-254 Medium
No
No
- 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 41 more
#VU100951 - Memory corruption
CVE-2024-11691
CWE-119 High
No
No
- 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 9 more
#VU100669 - Improper input validation
CVE-2024-44308
CWE-20 Critical
No
Exploited
- 19.11.2024 SB2024111982
SB2024111983
SB2024111984
and 15 more
#VU100668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-44309
CWE-79 High
No
Exploited
- 19.11.2024 SB2024111981
SB2024111982
SB2024111983
and 29 more


Showing elements 341 - 360 out of 1148