Known vulnerabilities in Fedora 40 - page 3

Software: Fedora
Version: 40
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1148
Public exploits: 68
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 40 Fedora 40 is affected by 1148 vulnerabilities: 14 critical, 368 high, 449 medium, 317 low Critical High Medium Low

Vulnerabilities (1148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107895 - Use After Free
CVE-2025-3416
CWE-416 Medium
No
No
- 24.04.2025 SB2025042401
SB2025042404
SB2025042405
and 32 more
#VU107893 - Out-of-bounds read
CVE-2025-43961
CWE-125 Medium
No
No
- 23.04.2025 SB2025042358
SB2025042415
SB2025042416
and 11 more
#VU107892 - Out-of-bounds read
CVE-2025-43962
CWE-125 Medium
No
No
- 23.04.2025 SB2025042358
SB2025042415
SB2025042416
and 13 more
#VU107891 - Improper input validation
CVE-2025-43964
CWE-20 Low
No
No
- 23.04.2025 SB2025042358
SB2025042415
SB2025042416
and 15 more
#VU107890 - Out-of-bounds read
CVE-2025-43963
CWE-125 Medium
No
No
- 23.04.2025 SB2025042358
SB2025042415
SB2025042416
and 14 more
#VU107605 - Out-of-bounds read
CVE-2025-32365
CWE-125 Medium
No
No
- 18.04.2025 SB2025041811
SB2025041815
SB2025041816
and 24 more
#VU107604 - Incorrect Calculation
CVE-2025-32364
CWE-682 Low
No
No
- 18.04.2025 SB2025041811
SB2025041815
SB2025041816
and 12 more
#VU107593 - Weak Password Requirements
CVE-2025-2291
CWE-521 Medium
No
No
- 17.04.2025 SB2025041743
SB2025041745
SB2025041746
and 4 more
#VU107466 - Heap-based Buffer Overflow
CVE-2025-3619
CWE-122 High
No
No
- 15.04.2025 SB2025041610
SB2025041744
SB2025041803
and 6 more
#VU107467 - Use After Free
CVE-2025-3620
CWE-416 High
No
No
- 15.04.2025 SB2025041610
SB2025041744
SB2025041803
and 8 more
#VU107429 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-53868
CWE-444 Medium
No
No
- 14.04.2025 SB2025041439
SB2025041443
SB2025041444
and 6 more
#VU107411 - Heap-based Buffer Overflow
CVE-2024-56406
CWE-122 High
Public exploit available
No
- 14.04.2025 SB2025041424
SB2025041425
SB2025041429
and 18 more
#VU107155 - Use After Free
CVE-2025-31498
CWE-416 High
No
No
- 08.04.2025 SB2025040846
SB2025040925
SB2025040926
and 18 more
#VU107147 - Exposure of sensitive information to an unauthorized actor
CVE-2025-31492
CWE-200 Medium
No
No
- 08.04.2025 SB2025040831
SB2025040833
SB2025040834
and 22 more
#VU107132 - Heap-based Buffer Overflow
CVE-2025-31344
CWE-122 High
No
No
- 08.04.2025 SB2025040803
SB2025040804
SB2025040805
and 11 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871
CWE-444 Medium
No
No
- 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU106081 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27793
CWE-79 Low
Public exploit available
No
- 27.03.2025 SB2025032707
SB2025041133
SB2025041134
and 2 more
#VU103896 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-23359
CWE-367 High
No
No
- 12.02.2025 SB2025021232
SB2025042336
SB2025042337
and 2 more
#VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24788
CWE-835 Medium
No
No
- 09.05.2024 SB2024050936
SB2024050937
SB2024051029
and 43 more
#VU81884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-2142
CWE-79 Medium
No
No
- 11.10.2023 SB2023101148
SB2025040875
SB2025040876
and 3 more


Showing elements 41 - 60 out of 1148