Known vulnerabilities in Fedora 42 - page 18

Software: Fedora
Version: 42
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1517
Public exploits: 50
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 42 Fedora 42 is affected by 1517 vulnerabilities: 12 critical, 534 high, 632 medium, 339 low Critical High Medium Low

Vulnerabilities (1517)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128475 - Improper Privilege Management
CVE-2026-35385
CWE-269 Low
No
No
- 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 30 more
#VU128469 - Off-by-one Error
CVE-2026-6861
CWE-193 Low
No
No
- 29.04.2026 SB2026042980
SB2026042981
SB2026042982
and 6 more
#VU128443 - Integer overflow
CVE-2026-7340
CWE-190 Medium
No
No
- 29.04.2026 SB2026042912
SB2026043019
SB2026043020
and 5 more
#VU128444 - Use After Free
CVE-2026-7355
CWE-416 Medium
No
No
- 29.04.2026 SB2026042912
SB2026043019
SB2026043020
and 6 more
#VU128441 - Use After Free
CVE-2026-7341
CWE-416 High
No
No
- 29.04.2026 SB2026042912
SB2026043019
SB2026043020
and 6 more
#VU128442 - Heap-based Buffer Overflow
CVE-2026-7339
CWE-122 Medium
No
No
- 29.04.2026 SB2026042912
SB2026043019
SB2026043020
and 6 more
#VU128440 - Use After Free
CVE-2026-7342
CWE-416 High
No
No
- 29.04.2026 SB2026042912
SB2026043019
SB2026043020
and 5 more
#VU128396 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33747
CWE-22 Low
No
No
- 28.04.2026 SB20260428214
SB20260428221
SB20260428222
and 9 more
#VU128379 - Missing Release of Resource after Effective Lifetime
CVE-2026-23556
CWE-772 Low
No
No
- 28.04.2026 SB20260428207
SB2026042901
SB20260429105
and 3 more
#VU128378 - Reachable Assertion
CVE-2026-23557
CWE-617 Medium
No
No
- 28.04.2026 SB20260428207
SB20260428235
SB2026042901
and 9 more
#VU128376 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23558
CWE-362 Medium
No
No
- 28.04.2026 SB20260428207
SB20260428235
SB2026042901
and 10 more
#VU128323 - UNIX Symbolic Link (Symlink) Following
CVE-2026-33056
CWE-61 Medium
No
No
- 28.04.2026 SB2026042866
SB2026042889
SB2026042890
and 61 more
#VU128268 - Origin Validation Error
CVE-2026-30964
CWE-346 Medium
No
No
- 28.04.2026 SB2026042823
SB2026042824
SB2026042825
#VU128026 - Improper Neutralization
CVE-2025-67733
CWE-707 Medium
No
No
- 27.04.2026 SB2026042756
SB2026042759
SB2026042760
and 10 more
#VU128025 - Out-of-bounds read
CVE-2026-21863
CWE-125 Medium
No
No
- 27.04.2026 SB2026042756
SB2026042759
SB2026042760
and 10 more
#VU126866 - Integer overflow
CVE-2026-33611
CWE-190 Low
No
No
- 22.04.2026 SB20260422221
SB2026042701
SB2026042702
and 6 more
#VU126867 - Resource exhaustion
CVE-2026-33610
CWE-400 Medium
No
No
- 22.04.2026 SB20260422221
SB2026042701
SB2026042702
and 6 more
#VU126567 - Observable discrepancy
CVE-2025-54505
CWE-203 Low
No
No
- 20.04.2026 SB2026042081
SB20260428235
SB2026042901
and 39 more
#VU124845 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33916
CWE-79 Medium
No
No
- 02.04.2026 SB2026040261
SB2026042720
SB2026042824
and 8 more
#VU123997 - Improper input validation
CVE-2026-2391
CWE-20 Medium
No
No
- 13.03.2026 SB2026031335
SB2026031336
SB2026032417
and 13 more


Showing elements 341 - 360 out of 1517