Known vulnerabilities in Fedora 41

Software: Fedora
Version: 41
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1100
Public exploits: 65
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 41 Fedora 41 is affected by 1100 vulnerabilities: 10 critical, 309 high, 447 medium, 334 low Critical High Medium Low

Vulnerabilities (1100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124624 - Improper Authorization
CVE-2025-62401
CWE-285 Medium
No
No
- 26.03.2026 SB2026032621
SB2026032622
SB2026032623
and 1 more
#VU124623 - Exposure of sensitive information to an unauthorized actor
CVE-2025-62400
CWE-200 Medium
No
No
- 26.03.2026 SB2026032621
SB2026032622
SB2026032623
and 1 more
#VU124621 - Improper Restriction of Excessive Authentication Attempts
CVE-2025-62399
CWE-307 High
No
No
- 26.03.2026 SB2026032621
SB2026032622
SB2026032623
and 1 more
#VU124455 - Improper Authentication
CVE-2025-62398
CWE-287 Medium
No
No
- 25.03.2026 SB2026032565
SB2026032621
SB2026032622
and 1 more
#VU124436 - Improper Access Control
CVE-2025-62395
CWE-284 Medium
No
No
- 25.03.2026 SB2026032565
SB2026032621
SB2026032622
and 1 more
#VU121635 - Incorrect Authorization
CVE-2025-0781
CWE-863 High
No
No
- 16.01.2026 SB20260116119
SB20260116121
SB20260116122
and 1 more
#VU121008 - Insecure Automated Optimizations
CVE-2023-52971
CWE-1038 Low
No
No
- 07.01.2026 SB2025122915
SB2026010703
SB2026010704
and 5 more
#VU120623 - Insecure Automated Optimizations
CVE-2023-52970
CWE-1038 Low
No
No
- 29.12.2025 SB2025122915
SB2025122918
SB2025122926
and 12 more
#VU120622 - Insecure Automated Optimizations
CVE-2023-52969
CWE-1038 Low
No
No
- 29.12.2025 SB2025122915
SB2025122918
SB2025122920
and 16 more
#VU120191 - Improper input validation
CVE-2024-12224
CWE-20 Medium
No
No
- 18.12.2025 SB2025121849
SB2025121856
SB2025121857
and 22 more
#VU118804 - Integer underflow
CVE-2025-49112
CWE-191 Low
No
No
- 27.11.2025 SB2025100737
SB2025112723
SB2025112729
and 8 more
#VU118776 - NULL Pointer Dereference
CVE-2025-55780
CWE-476 Low
No
No
- 26.11.2025 SB2025112631
SB2025112642
SB2025112643
and 3 more
#VU118775 - Uncontrolled Recursion
CVE-2025-46206
CWE-674 Low
No
No
- 26.11.2025 SB2025112630
SB2025112634
SB2025112640
and 1 more
#VU118725 - Resource exhaustion
CVE-2025-9648
CWE-400 Medium
No
No
- 24.11.2025 SB2025112460
SB2025112462
SB2025112463
and 6 more
#VU118628 - Resource exhaustion
CVE-2025-59089
CWE-400 Medium
No
No
- 19.11.2025 SB2025111953
SB2025111954
SB2025111955
and 15 more
#VU118627 - Server-Side Request Forgery (SSRF)
CVE-2025-59088
CWE-918 Medium
No
No
- 19.11.2025 SB2025111953
SB2025111954
SB2025111955
and 15 more
#VU118558 - Improper input validation
CVE-2025-11568
CWE-20 Low
No
No
- 17.11.2025 SB2025111732
SB2025111735
SB2025111736
and 5 more
#VU118371 - Insufficient Logging
CVE-2025-64517
CWE-778 Low
No
No
- 12.11.2025 SB2025111250
SB2025111266
SB2025111269
and 3 more
#VU118370 - Exposure of sensitive information to an unauthorized actor
CVE-2025-64170
CWE-200 Low
No
No
- 12.11.2025 SB2025111250
SB2025111266
SB2025111269
and 3 more
#VU118261 - Protection Mechanism Failure
CVE-2025-13018
CWE-693 Medium
No
No
- 11.11.2025 SB2025111145
SB2025111260
SB2025111303
and 36 more


Showing elements 1 - 20 out of 1100