Known vulnerabilities in Fedora 42 - page 70

Software: Fedora
Version: 42
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1517
Public exploits: 50
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 42 Fedora 42 is affected by 1517 vulnerabilities: 12 critical, 534 high, 632 medium, 339 low Critical High Medium Low

Vulnerabilities (1517)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106282 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-12905
CWE-59 High
No
No
- 31.03.2025 SB2025033140
SB2025033150
SB2025033151
and 15 more
#VU106278 - Improper Authorization
CVE-2025-30093
CWE-285 Medium
No
No
- 31.03.2025 SB2025033137
SB2025033146
SB2025033147
and 2 more
#VU106276 - Use of Insufficiently Random Values
CVE-2025-1860
CWE-330 Medium
No
No
- 31.03.2025 SB2025033130
SB2025033132
SB2025033133
and 3 more
#VU106253 - Improper input validation
CVE-2025-22870
CWE-20 Medium
Public exploit available
No
- 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU106059 - Use After Free
CVE-2025-30232
CWE-416 Low
No
No
- 26.03.2025 SB2025032646
SB2025032653
SB2025032654
and 7 more
#VU106058 - Stack-based buffer overflow
CVE-2025-30472
CWE-121 Medium
No
No
- 26.03.2025 SB2025032644
SB2025032647
SB2025032648
and 11 more
#VU105972 - NULL Pointer Dereference
CVE-2025-2588
CWE-476 Low
No
No
- 24.03.2025 SB2025032435
SB2025032437
SB2025032438
and 9 more
#VU105946 - Use After Free
CVE-2025-24855
CWE-416 High
No
No
- 21.03.2025 SB2025031964
SB2025032154
SB2025032155
and 63 more
#VU105931 - Improper input validation
CVE-2025-29917
CWE-20 Medium
No
No
- 21.03.2025 SB2025032122
SB2025032601
SB2025032602
and 3 more
#VU105932 - Improper input validation
CVE-2025-29918
CWE-20 Medium
No
No
- 21.03.2025 SB2025032122
SB2025032601
SB2025032602
and 3 more
#VU105933 - Improper input validation
CVE-2025-29916
CWE-20 Medium
No
No
- 21.03.2025 SB2025032122
SB2025032601
SB2025032602
and 3 more
#VU105930 - Improper input validation
CVE-2025-29915
CWE-20 Medium
No
No
- 21.03.2025 SB2025032117
SB2025032118
SB2025032119
and 8 more
#VU105879 - Use After Free
CVE-2024-55549
CWE-416 High
No
No
- 19.03.2025 SB2025031964
SB2025031965
SB2025032155
and 69 more
#VU105878 - Use After Free
CVE-2025-2476
CWE-416 High
No
No
- 19.03.2025 SB2025031963
SB2025032101
SB2025032136
and 8 more
#VU105850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-30346
CWE-444 Medium
No
No
- 18.03.2025 SB2025031859
SB2025032567
SB2025032630
and 1 more
#VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26791
CWE-79 Low
No
No
- 17.03.2025 SB2025031740
SB2025031741
SB2025031771
and 35 more
#VU105548 - Out-of-bounds write
CVE-2025-24201
CWE-787 Critical
Public exploit available
Exploited
- 11.03.2025 SB2025031182
SB2025031183
SB2025031185
and 41 more
#VU104137 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26794
CWE-89 Medium
Public exploit available
No
- 21.02.2025 SB2025022136
SB2025022446
SB2025022447
and 4 more
#VU102463 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-55565
CWE-835 Medium
No
No
- 08.01.2025 SB2025010849
SB2025010851
SB2025010853
and 45 more
#VU90156 - Security Features
CVE-2024-35195
CWE-254 Low
No
No
- 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more


Showing elements 1381 - 1400 out of 1517