Known vulnerabilities in Fedora 42 - page 62

Software: Fedora
Version: 42
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1517
Public exploits: 50
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 42 Fedora 42 is affected by 1517 vulnerabilities: 12 critical, 534 high, 632 medium, 339 low Critical High Medium Low

Vulnerabilities (1517)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111859 - Improper input validation
CVE-2025-22242
CWE-20 Low
No
No
- 23.06.2025 SB2025062336
SB2025062338
SB2025062340
and 8 more
#VU111858 - Permissions, Privileges, and Access Controls
CVE-2025-22241
CWE-264 Low
No
No
- 23.06.2025 SB2025062336
SB2025062338
SB2025062340
and 8 more
#VU111857 - Permissions, Privileges, and Access Controls
CVE-2025-22240
CWE-264 Low
No
No
- 23.06.2025 SB2025062336
SB2025062338
SB2025062340
and 8 more
#VU111856 - Insufficient Verification of Data Authenticity
CVE-2025-22239
CWE-345 Low
No
No
- 23.06.2025 SB2025062336
SB2025062338
SB2025062340
and 8 more
#VU111854 - Improper Authorization
CVE-2025-22237
CWE-285 Low
No
No
- 23.06.2025 SB2025062336
SB2025062338
SB2025062342
and 7 more
#VU111853 - Improper Authorization
CVE-2025-22236
CWE-285 Low
No
No
- 23.06.2025 SB2025062336
SB2025062338
SB2025062340
and 8 more
#VU111852 - Improper Authentication
CVE-2024-38825
CWE-287 Medium
No
No
- 23.06.2025 SB2025062336
SB2025062338
SB2025062342
and 7 more
#VU111851 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38824
CWE-22 Medium
No
No
- 23.06.2025 SB2025062336
SB2025062338
SB2025062340
and 8 more
#VU111850 - Insufficient Verification of Data Authenticity
CVE-2024-38823
CWE-345 Low
No
No
- 23.06.2025 SB2025062336
SB2025062338
SB2025062342
and 7 more
#VU111849 - Improper Authentication
CVE-2024-38822
CWE-287 Low
No
No
- 23.06.2025 SB2025062336
SB2025062338
SB2025062342
and 7 more
#VU111389 - Improper Access Control
CVE-2025-6020
CWE-284 Low
No
No
- 19.06.2025 SB2025061987
SB2025061992
SB20250619103
and 69 more
#VU111385 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-6019
CWE-362 Low
Public exploit available
No
- 19.06.2025 SB2025061983
SB2025061988
SB2025061989
and 21 more
#VU111265 - Improper Access Control
CVE-2025-49518
CWE-284 Medium
No
No
- 18.06.2025 SB2025061828
SB20250619210
SB20250619212
#VU111257 - Missing Authorization
CVE-2025-49517
CWE-862 Medium
No
No
- 18.06.2025 SB2025061828
SB20250619210
SB20250619212
#VU111256 - Cross-Site Request Forgery (CSRF)
CVE-2025-49516
CWE-352 Low
No
No
- 18.06.2025 SB2025061828
SB20250619210
SB20250619212
#VU111255 - Exposure of sensitive information to an unauthorized actor
CVE-2025-49515
CWE-200 Medium
No
No
- 18.06.2025 SB2025061828
SB20250619210
SB20250619212
#VU111253 - Use of Cache Containing Sensitive Information
CVE-2025-49513
CWE-524 Low
No
No
- 18.06.2025 SB2025061828
SB20250619210
SB20250619212
#VU111252 - Server-Side Request Forgery (SSRF)
CVE-2025-49514
CWE-918 Medium
No
No
- 18.06.2025 SB2025061828
SB20250619210
SB20250619212
#VU111233 - Integer overflow
CVE-2025-6191
CWE-190 High
No
No
- 17.06.2025 SB2025061737
SB2025061963
SB2025062028
and 6 more
#VU111234 - Use After Free
CVE-2025-6192
CWE-416 High
No
No
- 17.06.2025 SB2025061737
SB2025061963
SB2025062028
and 7 more


Showing elements 1221 - 1240 out of 1517