Known vulnerabilities in Fedora 42 - page 19

Software: Fedora
Version: 42
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1517
Public exploits: 50
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 42 Fedora 42 is affected by 1517 vulnerabilities: 12 critical, 534 high, 632 medium, 339 low Critical High Medium Low

Vulnerabilities (1517)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127958 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-6921
CWE-362 High
No
No
- 26.04.2026 SB2026042606
SB2026042607
SB2026042608
and 7 more
#VU127957 - Out-of-bounds read
CVE-2026-6920
CWE-125 Medium
No
No
- 26.04.2026 SB2026042606
SB2026042608
SB2026042609
and 7 more
#VU127956 - Use After Free
CVE-2026-6919
CWE-416 High
No
No
- 26.04.2026 SB2026042606
SB2026042607
SB2026042608
and 7 more
#VU127928 - Out-of-bounds write
CVE-2026-25061
CWE-787 Medium
No
No
- 25.04.2026 SB20260425212
SB20260425216
SB20260425217
and 2 more
#VU127613 - Resource exhaustion
CVE-2026-31899
CWE-400 Medium
No
No
- 24.04.2026 SB20260424174
SB20260424175
SB20260424176
and 6 more
#VU127529 - Improper input validation
CVE-2026-35058
CWE-20 Low
No
No
- 24.04.2026 SB20260424124
SB20260424129
SB20260424130
and 14 more
#VU127528 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-40215
CWE-362 Low
No
No
- 24.04.2026 SB20260424124
SB20260424129
SB20260424130
and 14 more
#VU127487 - Resource exhaustion
CVE-2026-26076
CWE-400 Medium
No
No
- 24.04.2026 SB2026042444
SB2026042446
SB2026042447
and 4 more
#VU127464 - Improper Certificate Validation
CVE-2026-32627
CWE-295 High
No
No
- 24.04.2026 SB2026042435
SB2026042445
SB2026042452
and 8 more
#VU126954 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2026-0396
CWE-80 Low
No
No
- 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126955 - Overly Permissive Cross-domain Whitelist
CVE-2026-0397
CWE-942 Low
No
No
- 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126956 - Out-of-bounds read
CVE-2026-24028
CWE-125 Medium
No
No
- 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126957 - Incorrect Authorization
CVE-2026-24029
CWE-863 Medium
No
No
- 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126958 - Uncontrolled Memory Allocation
CVE-2026-24030
CWE-789 Medium
No
No
- 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126959 - Use After Free
CVE-2026-27854
CWE-416 Low
No
No
- 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126960 - Out-of-bounds write
CVE-2026-27853
CWE-787 Medium
No
No
- 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126868 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-33609
CWE-90 Low
No
No
- 22.04.2026 SB20260422221
SB2026042701
SB2026042702
and 6 more
#VU126701 - Allocation of Resources Without Limits or Throttling
CVE-2026-39396
CWE-770 Low
No
No
- 21.04.2026 SB2026042149
SB2026042172
SB2026042173
and 6 more
#VU126699 - Improper Authentication
CVE-2026-39388
CWE-287 Low
No
No
- 21.04.2026 SB2026042149
SB2026042172
SB2026042173
and 6 more
#VU125101 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-39881
CWE-78 Medium
No
No
- 08.04.2026 SB2026040828
SB2026041567
SB2026042494
and 9 more


Showing elements 361 - 380 out of 1517