Known vulnerabilities in Fedora - page 72

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 13358
Public exploits: 703
Known exploited (KEV): 179
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 13358 known vulnerabilities: 103 critical, 3539 high, 5250 medium, 4465 low Critical High Medium Low

Vulnerabilities (13358)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128473 - Improper input validation
CVE-2026-35386
CWE-20 Low
No
No
- 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 16 more
#VU128474 - Improper Access Control
CVE-2026-35414
CWE-284 Low
No
No
- 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 24 more
#VU128476 - Improper Access Control
CVE-2026-35387
CWE-284 Low
No
No
- 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 17 more
#VU128477 - Improper Authorization
CVE-2026-35388
CWE-285 Low
No
No
- 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 19 more
#VU128469 - Off-by-one Error
CVE-2026-6861
CWE-193 Low
No
No
- 29.04.2026 SB2026042980
SB2026042981
SB2026042982
and 6 more
#VU128396 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33747
CWE-22 Low
No
No
- 28.04.2026 SB20260428214
SB20260428221
SB20260428222
and 9 more
#VU128395 - Improper input validation
CVE-2026-33748
CWE-20 Medium
No
No
- 28.04.2026 SB20260428214
SB20260428220
SB2026050767
and 8 more
#VU128379 - Missing Release of Resource after Effective Lifetime
CVE-2026-23556
CWE-772 Low
No
No
- 28.04.2026 SB20260428207
SB2026042901
SB20260429105
and 3 more
#VU128378 - Reachable Assertion
CVE-2026-23557
CWE-617 Medium
No
No
- 28.04.2026 SB20260428207
SB20260428235
SB2026042901
and 9 more
#VU128376 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23558
CWE-362 Medium
No
No
- 28.04.2026 SB20260428207
SB20260428235
SB2026042901
and 10 more
#VU128323 - UNIX Symbolic Link (Symlink) Following
CVE-2026-33056
CWE-61 Medium
No
No
- 28.04.2026 SB2026042866
SB2026042889
SB2026042890
and 61 more
#VU128268 - Origin Validation Error
CVE-2026-30964
CWE-346 Medium
No
No
- 28.04.2026 SB2026042823
SB2026042824
SB2026042825
#VU126567 - Observable discrepancy
CVE-2025-54505
CWE-203 Low
No
No
- 20.04.2026 SB2026042081
SB20260428235
SB2026042901
and 39 more
#VU124845 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33916
CWE-79 Medium
No
No
- 02.04.2026 SB2026040261
SB2026042720
SB2026042824
and 8 more
#VU124805 - Improper input validation
CVE-2026-34872
CWE-20 Medium
No
No
- 02.04.2026 SB2026040204
SB2026040205
SB20260427166
and 2 more
#VU124728 - Resource exhaustion
CVE-2026-27857
CWE-400 Medium
No
No
- 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 20 more
#VU124729 - Resource exhaustion
CVE-2026-27858
CWE-400 Medium
No
No
- 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 16 more
#VU124612 - Use After Free
CVE-2026-32748
CWE-416 Medium
No
No
- 25.03.2026 SB20260325206
SB2026033197
SB2026040350
and 15 more
#VU124610 - Use After Free
CVE-2026-33526
CWE-416 Medium
No
No
- 25.03.2026 SB20260325206
SB2026033197
SB2026040350
and 18 more
#VU123997 - Improper input validation
CVE-2026-2391
CWE-20 Medium
No
No
- 13.03.2026 SB2026031335
SB2026031336
SB2026032417
and 13 more


Showing elements 1421 - 1440 out of 13358