Known vulnerabilities in Fedora 40 - page 2

Software: Fedora
Version: 40
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1148
Public exploits: 68
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 40 Fedora 40 is affected by 1148 vulnerabilities: 14 critical, 368 high, 449 medium, 317 low Critical High Medium Low

Vulnerabilities (1148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108768 - Improper Neutralization of Wildcards or Matching Symbols
CVE-2024-47619
CWE-155 Medium
No
No
- 07.05.2025 SB2025050772
SB2025050852
SB2025050853
and 6 more
#VU108740 - Use After Free
CVE-2025-4372
CWE-416 Medium
No
No
- 06.05.2025 SB2025050671
SB2025050788
SB2025050854
and 7 more
#VU108124 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-43859
CWE-444 Medium
No
No
- 02.05.2025 SB2025050214
SB2025050215
SB2025050216
and 24 more
#VU108062 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-31510
CWE-79 Low
No
No
- 29.04.2025 SB2025042951
SB2025042953
SB2025042965
and 4 more
#VU108061 - Out-of-bounds read
CVE-2025-0977
CWE-125 Medium
No
No
- 29.04.2025 SB2025040429
SB2025042956
SB2025042957
and 8 more
#VU108060 - Improper input validation
CVE-2023-52892
CWE-20 Medium
No
No
- 29.04.2025 SB2025042950
SB2025042954
SB2025042955
and 1 more
#VU108059 - Cross-Site Request Forgery (CSRF)
CVE-2024-52948
CWE-352 Medium
No
No
- 29.04.2025 SB2025042939
SB2025042944
SB2025042945
and 4 more
#VU108063 - Heap-based Buffer Overflow
CVE-2025-4096
CWE-122 High
No
No
- 29.04.2025 SB2025042952
SB2025050134
SB2025050135
and 7 more
#VU108064 - Out-of-bounds read
CVE-2025-4050
CWE-125 Medium
No
No
- 29.04.2025 SB2025042952
SB2025050134
SB2025050135
and 7 more
#VU108065 - Improper input validation
CVE-2025-4051
CWE-20 Medium
No
No
- 29.04.2025 SB2025042952
SB2025050134
SB2025050135
and 7 more
#VU108066 - Improperly Implemented Security Check for Standard
CVE-2025-4052
CWE-358 Low
No
No
- 29.04.2025 SB2025042952
SB2025050134
SB2025050135
and 7 more
#VU108058 - Improper input validation
CVE-2023-30536
CWE-20 Low
No
No
- 29.04.2025 SB2023041755
SB2025042940
SB2025042941
and 2 more
#VU108042 - Double Free
CVE-2025-30194
CWE-415 Medium
No
No
- 29.04.2025 SB2025042923
SB2025050661
SB2025050662
and 2 more
#VU107994 - Use of Weak Hash
CVE-2024-47829
CWE-328 Low
No
No
- 28.04.2025 SB2025042842
SB2025042845
SB2025042846
and 1 more
#VU107887 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2025-3155
CWE-497 Medium
No
No
- 23.04.2025 SB2025042344
SB2025042346
SB2025050507
and 22 more
#VU107885 - Resource Management Errors
CVE-2025-21605
CWE-399 Medium
No
No
- 23.04.2025 SB2025042342
SB2025042455
SB2025042456
and 33 more
#VU88822 - Memory corruption
CVE-2024-2961
CWE-119 High
Public exploit available
Exploited
- 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more
#VU86826 - Improper input validation
CVE-2024-27354
CWE-20 Medium
No
No
- 27.02.2024 SB2024022726
SB2024031128
SB2025042954
and 2 more
#VU85835 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-21647
CWE-444 Medium
No
No
- 26.01.2024 SB2024012625
SB2024012628
SB2024030762
and 10 more
#VU82971 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40175
CWE-444 Medium
No
No
- 10.11.2023 SB2023111025
SB2023111028
SB2024021549
and 8 more


Showing elements 21 - 40 out of 1148