Known vulnerabilities in Fedora 40 - page 3

Software: Fedora
Version: 40
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1148
Public exploits: 68
Known exploited (KEV): 18

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 40 Fedora 40 is affected by 1148 vulnerabilities: 14 critical, 368 high, 449 medium, 317 low Critical High Medium Low

Vulnerabilities (1148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108059 - Cross-Site Request Forgery (CSRF)
CVE-2024-52948
CWE-352 Medium
No
No
- 29.04.2025 SB2025042939
SB2025042944
SB2025042945
and 4 more
#VU108058 - Improper input validation
CVE-2023-30536
CWE-20 Low
No
No
- 29.04.2025 SB2023041755
SB2025042940
SB2025042941
and 2 more
#VU107994 - Use of Weak Hash
CVE-2024-47829
CWE-328 Low
No
No
- 28.04.2025 SB2025042842
SB2025042845
SB2025042846
and 1 more
#VU107893 - Out-of-bounds read
CVE-2025-43961
CWE-125 Medium
No
No
- 23.04.2025 SB2025042358
SB2025042415
SB2025042416
and 11 more
#VU107892 - Out-of-bounds read
CVE-2025-43962
CWE-125 Medium
No
No
- 23.04.2025 SB2025042358
SB2025042415
SB2025042416
and 13 more
#VU107891 - Improper input validation
CVE-2025-43964
CWE-20 Low
No
No
- 23.04.2025 SB2025042358
SB2025042415
SB2025042416
and 15 more
#VU107890 - Out-of-bounds read
CVE-2025-43963
CWE-125 Medium
No
No
- 23.04.2025 SB2025042358
SB2025042415
SB2025042416
and 14 more
#VU107885 - Resource Management Errors
CVE-2025-21605
CWE-399 Medium
No
No
- 23.04.2025 SB2025042342
SB2025042455
SB2025042456
and 33 more
#VU107614 - Improper input validation
CVE-2023-43669
CWE-20 High
No
No
- 18.04.2025 SB2023092163
SB2025041855
SB2023092407
and 3 more
#VU103896 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-23359
CWE-367 High
No
No
- 12.02.2025 SB2025021232
SB2025042336
SB2025042337
and 2 more
#VU102463 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-55565
CWE-835 Medium
No
No
- 08.01.2025 SB2025010849
SB2025010851
SB2025010853
and 45 more
#VU102267 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-56519
CWE-79 Low
No
No
- 30.12.2024 SB20241230290
SB20241230307
SB20241230308
and 2 more
#VU102264 - Improper Certificate Validation
CVE-2024-56521
CWE-295 Low
No
No
- 30.12.2024 SB20241230290
SB20241230307
SB20241230308
and 2 more
#VU102263 - Incorrect Comparison
CVE-2024-56522
CWE-697 Low
No
No
- 30.12.2024 SB20241230290
SB20241230307
SB20241230308
and 2 more
#VU102258 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-56527
CWE-79 Low
No
No
- 30.12.2024 SB20241230290
SB20241230307
SB20241230308
and 2 more
#VU88822 - Memory corruption
CVE-2024-2961
CWE-119 High
Public exploit available
Exploited
- 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more
#VU86826 - Improper input validation
CVE-2024-27354
CWE-20 Medium
No
No
- 27.02.2024 SB2024022726
SB2024031128
SB2025042954
and 3 more
#VU85835 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-21647
CWE-444 Medium
No
No
- 26.01.2024 SB2024012625
SB2024012628
SB2024030762
and 10 more
#VU82971 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40175
CWE-444 Medium
No
No
- 10.11.2023 SB2023111025
SB2023111028
SB2024021549
and 8 more
#VU81307 - Improper input validation
CVE-2023-44270
CWE-20 Low
No
No
- 02.10.2023 SB2023100210
SB2023111710
SB2023112080
and 28 more


Showing elements 41 - 60 out of 1148