Known vulnerabilities in Fedora - page 27

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 14051
Public exploits: 708
Known exploited (KEV): 186

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 14051 known vulnerabilities: 106 critical, 3801 high, 5483 medium, 4660 low Critical High Medium Low

Vulnerabilities (14051)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116003 - Deserialization of Untrusted Data
CVE-2022-39379
CWE-502 Low
No
No
- 22.09.2025 SB2022110284
SB2025092257
SB2025092258
and 1 more
#VU114997 - NULL Pointer Dereference
CVE-2022-4121
CWE-476 Medium
No
No
- 09.09.2025 SB2023011791
SB2025090913
SB2022112357
and 2 more
#VU79748 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39335
CWE-200 Low
No
No
- 20.08.2023 SB20230820232
SB20230820233
SB2023090940
and 1 more
#VU129605 - Improper input validation
CVE-2023-32323
CWE-20 Low
No
No
- 24.05.2023 SB2023052450
SB2023090940
#VU129606 - Incorrect Authorization
CVE-2022-39374
CWE-863 Low
No
No
- 24.05.2023 SB2023052449
SB2023090940
SB20250422198
#VU125380 - Improper Certificate Validation
CVE-2022-43705
CWE-295 Low
No
No
- 16.11.2022 SB2022111680
SB2022112983
#VU130482 - Improper Access Control
CVE-2022-1053
CWE-284 High
No
No
- 04.05.2022 SB2022050459
SB2022050460
SB2022050461
and 1 more
#VU128070 - Improper Privilege Management
CVE-2022-27650
CWE-269 Low
No
No
- 26.03.2022 SB2022032618
SB2022033129
SB2022051086
and 3 more
#VU130487 - Improper Output Neutralization for Logs
CVE-2022-23949
CWE-117 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130485 - Improper Access Control
CVE-2022-23950
CWE-284 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130484 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2022-23951
CWE-409 Medium
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130488 - Improper Access Control
CVE-2022-23948
CWE-284 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130483 - Incorrect Permission Assignment for Critical Resource
CVE-2022-23952
CWE-732 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130489 - Authentication Bypass by Spoofing
CVE-2021-43310
CWE-290 High
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU127033 - Use After Free
CVE-2021-39216
CWE-416 Low
No
No
- 17.09.2021 SB2021091726
SB2021092244
SB2021092504
and 1 more
#VU127031 - Free of Memory not on the Heap
CVE-2021-39218
CWE-590 Medium
No
No
- 17.09.2021 SB2021091726
SB2021092244
SB2021092504
and 1 more
#VU127032 - Type confusion
CVE-2021-39219
CWE-843 Low
No
No
- 17.09.2021 SB2021091726
SB2021092244
SB2021092504
and 1 more
#VU129608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21332
CWE-79 Medium
No
No
- 25.03.2021 SB2021032548
SB2021071802
SB2021072328
#VU51007 - Improper input validation
CVE-2021-21274
CWE-20 Low
No
No
- 01.03.2021 SB2021030111
SB2021071802
SB2021072328
#VU51006 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-21273
CWE-601 Medium
No
No
- 01.03.2021 SB2021030111
SB2021071802
SB2021072328


Showing elements 521 - 540 out of 14051