Known vulnerabilities in Fedora 42

Software: Fedora
Version: 42
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1518
Public exploits: 51
Known exploited (KEV): 18

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 42 Fedora 42 is affected by 1518 vulnerabilities: 12 critical, 534 high, 632 medium, 340 low Critical High Medium Low

Vulnerabilities (1518)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148982 - NULL Pointer Dereference
CVE-2026-2100
CWE-476 Low
No
No
- 11.09.2026 SB2026091125
SB2026091129
SB2026091130
and 1 more
#VU143918 - Incorrect Control Flow Scoping
CVE-2026-3449
CWE-705 Low
No
No
- 18.08.2026 SB2026081807
SB2026081810
SB2026081811
and 3 more
#VU143641 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-34714
CWE-78 Low
No
No
- 17.08.2026 SB2026081760
SB2026081761
SB2026081762
and 6 more
#VU139903 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2025-58367
CWE-915 High
No
No
- 28.07.2026 SB2026072898
SB2025091583
SB2025091584
and 3 more
#VU139808 - Improper Validation of Syntactic Correctness of Input
CVE-2026-40198
CWE-1286 High
No
No
- 28.07.2026 SB2026072806
SB2026072807
SB2026072808
and 7 more
#VU139806 - Improper Handling of Length Parameter Inconsistency
CVE-2026-40199
CWE-130 Medium
No
No
- 28.07.2026 SB2026072805
SB2026072807
SB2026072808
and 7 more
#VU139082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-6321
CWE-22 Medium
No
No
- 22.07.2026 SB2026072227
SB2026072228
SB2026072229
and 13 more
#VU137406 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32711
CWE-22 Low
No
No
- 14.07.2026 SB2026071436
SB2026071437
SB2026071438
and 2 more
#VU135706 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-0540
CWE-79 Medium
No
No
- 29.06.2026 SB2026062916
SB2026062922
SB2026081810
and 3 more
#VU126561 - Permissive List of Allowed Inputs
CVE-2026-41240
CWE-183 Low
No
No
- 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 11 more
#VU126498 - Out-of-bounds write
CVE-2026-41676
CWE-787 Medium
No
No
- 20.04.2026 SB2026042021
SB2026061905
SB2026061906
and 47 more
#VU126497 - Out-of-bounds read
CVE-2026-41677
CWE-125 Medium
No
No
- 20.04.2026 SB2026042021
SB2026061905
SB2026061906
and 41 more
#VU126496 - Out-of-bounds write
CVE-2026-41678
CWE-787 High
No
No
- 20.04.2026 SB2026042021
SB2026061905
SB2026061906
and 41 more
#VU125803 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-4800
CWE-94 High
No
No
- 10.04.2026 SB2026041094
SB20260410101
SB20260410102
and 65 more
#VU123598 - Inefficient Regular Expression Complexity
CVE-2025-69873
CWE-1333 Low
No
No
- 06.03.2026 SB2026030610
SB2026030633
SB2026033162
and 10 more
#VU122318 - Exposure of sensitive information to an unauthorized actor
CVE-2024-53858
CWE-200 Medium
No
No
- 04.02.2026 SB2024112762
SB2026020478
SB20241210116
#VU101844 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-54132
CWE-22 Medium
No
No
- 19.12.2024 SB2024121908
SB2026020478
SB20241210116
#VU129772 - Improper Resolution of Path Equivalence
CVE-2024-45405
CWE-41 Medium
No
No
- 06.09.2024 SB2024090690
SB2024091972
SB2024102374
#VU129773 - Use of Incorrectly-Resolved Name or Reference
CVE-2024-45305
CWE-706 Low
No
No
- 31.08.2024 SB2024083103
SB2024091972
#VU91159 - Improper input validation
CVE-2024-24789
CWE-20 Low
No
No
- 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 78 more


Showing elements 1 - 20 out of 1518