Known vulnerabilities in Fedora 40 - page 4

Software: Fedora
Version: 40
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1148
Public exploits: 68
Known exploited (KEV): 18

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 40 Fedora 40 is affected by 1148 vulnerabilities: 14 critical, 368 high, 449 medium, 317 low Critical High Medium Low

Vulnerabilities (1148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107605 - Out-of-bounds read
CVE-2025-32365
CWE-125 Medium
No
No
- 18.04.2025 SB2025041811
SB2025041815
SB2025041816
and 24 more
#VU107604 - Incorrect Calculation
CVE-2025-32364
CWE-682 Low
No
No
- 18.04.2025 SB2025041811
SB2025041815
SB2025041816
and 12 more
#VU107593 - Weak Password Requirements
CVE-2025-2291
CWE-521 Medium
No
No
- 17.04.2025 SB2025041743
SB2025041745
SB2025041746
and 4 more
#VU107466 - Heap-based Buffer Overflow
CVE-2025-3619
CWE-122 High
No
No
- 15.04.2025 SB2025041610
SB2025041744
SB2025041803
and 6 more
#VU107467 - Use After Free
CVE-2025-3620
CWE-416 High
No
No
- 15.04.2025 SB2025041610
SB2025041744
SB2025041803
and 8 more
#VU107429 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-53868
CWE-444 Medium
No
No
- 14.04.2025 SB2025041439
SB2025041443
SB2025041444
and 6 more
#VU107411 - Heap-based Buffer Overflow
CVE-2024-56406
CWE-122 High
Public exploit available
No
- 14.04.2025 SB2025041424
SB2025041425
SB2025041429
and 18 more
#VU107147 - Exposure of sensitive information to an unauthorized actor
CVE-2025-31492
CWE-200 Medium
No
No
- 08.04.2025 SB2025040831
SB2025040833
SB2025040834
and 22 more
#VU107132 - Heap-based Buffer Overflow
CVE-2025-31344
CWE-122 High
No
No
- 08.04.2025 SB2025040803
SB2025040804
SB2025040805
and 11 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871
CWE-444 Medium
No
No
- 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU106366 - Use After Free
CVE-2025-3066
CWE-416 High
No
No
- 01.04.2025 SB2025040399
SB20250403133
SB20250403134
and 14 more
#VU106253 - Improper input validation
CVE-2025-22870
CWE-20 Medium
Public exploit available
No
- 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU106081 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27793
CWE-79 Low
Public exploit available
No
- 27.03.2025 SB2025032707
SB2025041133
SB2025041134
and 2 more
#VU104041 - Improper input validation
CVE-2024-28047
CWE-20 Low
No
No
- 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 6 more
#VU104038 - Improper input validation
CVE-2024-28127
CWE-20 Low
No
No
- 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 1 more
#VU104036 - Improper input validation
CVE-2024-24582
CWE-20 Low
No
No
- 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 2 more
#VU104033 - Improper input validation
CVE-2023-34440
CWE-20 Low
No
No
- 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 2 more
#VU104031 - Improper input validation
CVE-2023-43758
CWE-20 Low
No
No
- 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 2 more
#VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24788
CWE-835 Medium
No
No
- 09.05.2024 SB2024050936
SB2024050937
SB2024051029
and 43 more
#VU81884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-2142
CWE-79 Medium
No
No
- 11.10.2023 SB2023101148
SB2025040875
SB2025040876
and 3 more


Showing elements 61 - 80 out of 1148