Known vulnerabilities in Fedora 40 - page 26

Software: Fedora
Version: 40
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1148
Public exploits: 68
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 40 Fedora 40 is affected by 1148 vulnerabilities: 14 critical, 368 high, 449 medium, 317 low Critical High Medium Low

Vulnerabilities (1148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97972 - Improper input validation
CVE-2024-31228
CWE-20 Medium
No
No
- 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 31 more
#VU97971 - Improper input validation
CVE-2024-31227
CWE-20 Medium
No
No
- 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 15 more
#VU97970 - Stack-based buffer overflow
CVE-2024-31449
CWE-121 Medium
No
No
- 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 33 more
#VU97753 - Predictable Seed in Pseudo-Random Number Generator (PRNG)
CVE-2024-41708
CWE-337 High
No
No
- 27.09.2024 SB2024092740
SB2024092744
SB2024092745
and 2 more
#VU97745 - Improper input validation
CVE-2024-47175
CWE-20 High
Public exploit available
No
- 27.09.2024 SB2024092719
SB2024092722
SB2024092723
and 50 more
#VU97744 - Command injection
CVE-2024-47177
CWE-77 High
Public exploit available
No
- 27.09.2024 SB2024092717
SB2024092725
SB2024092726
and 11 more
#VU97743 - Missing Authorization
CVE-2024-47176
CWE-862 High
Public exploit available
No
- 27.09.2024 SB2024092713
SB2024092715
SB2024092716
and 43 more
#VU97742 - Improper input validation
CVE-2024-47076
CWE-20 High
Public exploit available
No
- 27.09.2024 SB2024092712
SB2024092714
SB2024092715
and 27 more
#VU97691 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-8926
CWE-78 High
Public exploit available
No
- 25.09.2024 SB2024092519
SB2024092520
SB2024092524
and 7 more
#VU97680 - Deadlock
CVE-2024-45817
CWE-833 Low
No
No
- 24.09.2024 SB2024092463
SB2024092464
SB2024092466
and 16 more
#VU97448 - Type confusion
CVE-2024-8904
CWE-843 High
No
No
- 17.09.2024 SB2024091804
SB20240918137
SB20240918138
and 7 more
#VU97449 - Improperly Implemented Security Check for Standard
CVE-2024-8905
CWE-358 Low
No
No
- 17.09.2024 SB2024091804
SB20240918137
SB20240918138
and 8 more
#VU97450 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-8906
CWE-451 Medium
No
No
- 17.09.2024 SB2024091804
SB20240918137
SB20240918138
and 9 more
#VU97350 - Protection Mechanism Failure
CVE-2024-44187
CWE-693 Low
No
No
- 17.09.2024 SB2024091701
SB2024091702
SB2024091707
and 32 more
#VU97349 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-40866
CWE-451 Medium
No
No
- 17.09.2024 SB2024091701
SB2024091702
SB2024091707
and 26 more
#VU95316 - Integer overflow
CVE-2024-27833
CWE-190 High
No
No
- 05.08.2024 SB2024080504
SB2024051361
SB2024051402
and 18 more
#VU95300 - Exposure of sensitive information to an unauthorized actor
CVE-2024-27838
CWE-200 Low
No
No
- 05.08.2024 SB2024080504
SB2024051401
SB2024051361
and 20 more
#VU91106 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-4577
CWE-78 Critical
Public exploit available
Exploited
- 04.06.2024 SB2024060501
SB2024060502
SB2024060503
and 12 more
#VU89429 - Improper input validation
CVE-2024-31755
CWE-20 Medium
No
No
- 14.05.2024 SB2024051431
SB2024092634
SB2024092638
and 4 more
#VU89030 - Security Features
CVE-2024-23271
CWE-254 Medium
No
No
- 29.04.2024 SB2024042901
SB2024012308
SB2024012249
and 18 more


Showing elements 501 - 520 out of 1148