Known vulnerabilities in Fedora 40 - page 2

Software: Fedora
Version: 40
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1148
Public exploits: 68
Known exploited (KEV): 18

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 40 Fedora 40 is affected by 1148 vulnerabilities: 14 critical, 368 high, 449 medium, 317 low Critical High Medium Low

Vulnerabilities (1148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109941 - Resource exhaustion
CVE-2025-32907
CWE-400 Medium
No
No
- 29.05.2025 SB2025052993
SB2025052994
SB2025052995
and 27 more
#VU109939 - NULL Pointer Dereference
CVE-2025-32909
CWE-476 Low
No
No
- 29.05.2025 SB2025052718
SB2025052994
SB2025052995
and 14 more
#VU109929 - Buffer over-read
CVE-2025-32052
CWE-126 Medium
No
No
- 29.05.2025 SB2024111329
SB2025052980
SB2025052994
and 32 more
#VU109927 - Buffer over-read
CVE-2025-32053
CWE-126 Medium
No
No
- 29.05.2025 SB2024111329
SB2025052980
SB2025052994
and 29 more
#VU109834 - Out-of-bounds read
CVE-2025-32906
CWE-125 Medium
No
No
- 27.05.2025 SB2025052715
SB2025052723
SB2025052994
and 37 more
#VU108913 - Stack-based buffer overflow
CVE-2025-47256
CWE-121 High
Public exploit available
No
- 12.05.2025 SB2025051219
SB2025051222
SB2025051223
and 2 more
#VU108768 - Improper Neutralization of Wildcards or Matching Symbols
CVE-2024-47619
CWE-155 Medium
No
No
- 07.05.2025 SB2025050772
SB2025050852
SB2025050853
and 6 more
#VU108740 - Use After Free
CVE-2025-4372
CWE-416 Medium
No
No
- 06.05.2025 SB2025050671
SB2025050788
SB2025050854
and 7 more
#VU108124 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-43859
CWE-444 Medium
No
No
- 02.05.2025 SB2025050214
SB2025050215
SB2025050216
and 24 more
#VU108062 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-31510
CWE-79 Low
No
No
- 29.04.2025 SB2025042951
SB2025042953
SB2025042965
and 4 more
#VU108061 - Out-of-bounds read
CVE-2025-0977
CWE-125 Medium
No
No
- 29.04.2025 SB2025040429
SB2025042956
SB2025042957
and 8 more
#VU108060 - Improper input validation
CVE-2023-52892
CWE-20 Medium
No
No
- 29.04.2025 SB2025042950
SB2025042954
SB2025042955
and 2 more
#VU108063 - Heap-based Buffer Overflow
CVE-2025-4096
CWE-122 High
No
No
- 29.04.2025 SB2025042952
SB2025050134
SB2025050135
and 7 more
#VU108064 - Out-of-bounds read
CVE-2025-4050
CWE-125 Medium
No
No
- 29.04.2025 SB2025042952
SB2025050134
SB2025050135
and 7 more
#VU108065 - Improper input validation
CVE-2025-4051
CWE-20 Medium
No
No
- 29.04.2025 SB2025042952
SB2025050134
SB2025050135
and 7 more
#VU108066 - Improperly Implemented Security Check for Standard
CVE-2025-4052
CWE-358 Low
No
No
- 29.04.2025 SB2025042952
SB2025050134
SB2025050135
and 7 more
#VU108042 - Double Free
CVE-2025-30194
CWE-415 Medium
No
No
- 29.04.2025 SB2025042923
SB2025050661
SB2025050662
and 2 more
#VU107895 - Use After Free
CVE-2025-3416
CWE-416 Medium
No
No
- 24.04.2025 SB2025042401
SB2025042404
SB2025042405
and 32 more
#VU107887 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2025-3155
CWE-497 Medium
No
No
- 23.04.2025 SB2025042344
SB2025042346
SB2025050507
and 23 more
#VU107155 - Use After Free
CVE-2025-31498
CWE-416 High
No
No
- 08.04.2025 SB2025040846
SB2025040925
SB2025040926
and 19 more


Showing elements 21 - 40 out of 1148