Known vulnerabilities in Fedora 41 - page 25

Software: Fedora
Version: 41
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1100
Public exploits: 65
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 41 Fedora 41 is affected by 1100 vulnerabilities: 10 critical, 309 high, 447 medium, 334 low Critical High Medium Low

Vulnerabilities (1100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107605 - Out-of-bounds read
CVE-2025-32365
CWE-125 Medium
No
No
- 18.04.2025 SB2025041811
SB2025041815
SB2025041816
and 24 more
#VU107604 - Incorrect Calculation
CVE-2025-32364
CWE-682 Low
No
No
- 18.04.2025 SB2025041811
SB2025041815
SB2025041816
and 12 more
#VU107593 - Weak Password Requirements
CVE-2025-2291
CWE-521 Medium
No
No
- 17.04.2025 SB2025041743
SB2025041745
SB2025041746
and 4 more
#VU107466 - Heap-based Buffer Overflow
CVE-2025-3619
CWE-122 High
No
No
- 15.04.2025 SB2025041610
SB2025041744
SB2025041803
and 6 more
#VU107467 - Use After Free
CVE-2025-3620
CWE-416 High
No
No
- 15.04.2025 SB2025041610
SB2025041744
SB2025041803
and 7 more
#VU107429 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-53868
CWE-444 Medium
No
No
- 14.04.2025 SB2025041439
SB2025041443
SB2025041444
and 6 more
#VU107411 - Heap-based Buffer Overflow
CVE-2024-56406
CWE-122 High
Public exploit available
No
- 14.04.2025 SB2025041424
SB2025041425
SB2025041429
and 18 more
#VU107155 - Use After Free
CVE-2025-31498
CWE-416 High
No
No
- 08.04.2025 SB2025040846
SB2025040925
SB2025040926
and 18 more
#VU107147 - Exposure of sensitive information to an unauthorized actor
CVE-2025-31492
CWE-200 Medium
No
No
- 08.04.2025 SB2025040831
SB2025040833
SB2025040834
and 22 more
#VU107132 - Heap-based Buffer Overflow
CVE-2025-31344
CWE-122 High
No
No
- 08.04.2025 SB2025040803
SB2025040804
SB2025040805
and 11 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871
CWE-444 Medium
No
No
- 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU107018 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-2945
CWE-94 Medium
Public exploit available
Exploited
- 05.04.2025 SB2025040506
SB2025041801
#VU107017 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-2946
CWE-79 Low
No
No
- 05.04.2025 SB2025040506
SB2025041801
#VU106081 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27793
CWE-79 Low
Public exploit available
No
- 27.03.2025 SB2025032707
SB2025041133
SB2025041134
and 2 more
#VU105459 - Resource exhaustion
CVE-2025-22869
CWE-400 Low
No
No
- 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU104036 - Improper input validation
CVE-2024-24582
CWE-20 Low
No
No
- 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 2 more
#VU104033 - Improper input validation
CVE-2023-34440
CWE-20 Low
No
No
- 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 2 more
#VU104031 - Improper input validation
CVE-2023-43758
CWE-20 Low
No
No
- 18.02.2025 SB2025021823
SB2025040452
SB2025040453
and 2 more
#VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24788
CWE-835 Medium
No
No
- 09.05.2024 SB2024050936
SB2024050937
SB2024051029
and 43 more
#VU81884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-2142
CWE-79 Medium
No
No
- 11.10.2023 SB2023101148
SB2025040875
SB2025040876
and 3 more


Showing elements 481 - 500 out of 1100