Known vulnerabilities in Fedora 42

Software: Fedora
Version: 42
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1517
Public exploits: 50
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 42 Fedora 42 is affected by 1517 vulnerabilities: 12 critical, 534 high, 632 medium, 339 low Critical High Medium Low

Vulnerabilities (1517)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143918 - Incorrect Control Flow Scoping
CVE-2026-3449
CWE-705 Low
No
No
- 18.08.2026 SB2026081807
SB2026081810
SB2026081811
and 3 more
#VU143641 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-34714
CWE-78 Low
No
No
- 17.08.2026 SB2026081760
SB2026081761
SB2026081762
and 6 more
#VU139808 - Improper Validation of Syntactic Correctness of Input
CVE-2026-40198
CWE-1286 High
No
No
- 28.07.2026 SB2026072806
SB2026072807
SB2026072808
and 7 more
#VU139806 - Improper Handling of Length Parameter Inconsistency
CVE-2026-40199
CWE-130 Medium
No
No
- 28.07.2026 SB2026072805
SB2026072807
SB2026072808
and 7 more
#VU139082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-6321
CWE-22 Medium
No
No
- 22.07.2026 SB2026072227
SB2026072228
SB2026072229
and 12 more
#VU137406 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32711
CWE-22 Low
No
No
- 14.07.2026 SB2026071436
SB2026071437
SB2026071438
and 2 more
#VU135706 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-0540
CWE-79 Medium
No
No
- 29.06.2026 SB2026062916
SB2026062922
SB2026081810
and 2 more
#VU127606 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-42035
CWE-113 Medium
No
No
- 24.04.2026 SB20260424169
SB2026061912
SB2026061913
and 16 more
#VU126561 - Permissive List of Allowed Inputs
CVE-2026-41240
CWE-183 Low
No
No
- 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 9 more
#VU126498 - Out-of-bounds write
CVE-2026-41676
CWE-787 Medium
No
No
- 20.04.2026 SB2026042021
SB2026061905
SB2026061906
and 46 more
#VU126497 - Out-of-bounds read
CVE-2026-41677
CWE-125 Medium
No
No
- 20.04.2026 SB2026042021
SB2026061905
SB2026061906
and 41 more
#VU126496 - Out-of-bounds write
CVE-2026-41678
CWE-787 High
No
No
- 20.04.2026 SB2026042021
SB2026061905
SB2026061906
and 41 more
#VU126495 - Stack-based buffer overflow
CVE-2026-41681
CWE-121 Medium
No
No
- 20.04.2026 SB2026042021
SB2026061905
SB2026061906
and 41 more
#VU125780 - Information Exposure Through Timing Discrepancy
CVE-2026-40194
CWE-208 Low
No
No
- 10.04.2026 SB2026041033
SB2026061912
SB2026061913
and 3 more
#VU124844 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-33939
CWE-754 Medium
No
No
- 02.04.2026 SB2026040261
SB2026042720
SB2026061912
and 5 more
#VU124843 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33941
CWE-94 High
No
No
- 02.04.2026 SB2026040261
SB2026042720
SB2026061912
and 5 more
#VU124842 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33937
CWE-94 High
Public exploit available
No
- 02.04.2026 SB2026040261
SB2026042720
SB2026061912
and 5 more
#VU124841 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33938
CWE-94 High
No
No
- 02.04.2026 SB2026040261
SB2026042720
SB2026061912
and 5 more
#VU124840 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33940
CWE-94 High
No
No
- 02.04.2026 SB2026040261
SB2026042720
SB2026061912
and 5 more
#VU123598 - Inefficient Regular Expression Complexity
CVE-2025-69873
CWE-1333 Low
No
No
- 06.03.2026 SB2026030610
SB2026030633
SB2026033162
and 9 more


Showing elements 1 - 20 out of 1517