Known vulnerabilities in Fedora - page 99

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 13358
Public exploits: 703
Known exploited (KEV): 179
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 13358 known vulnerabilities: 103 critical, 3539 high, 5250 medium, 4465 low Critical High Medium Low

Vulnerabilities (13358)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122823 - Type confusion
CVE-2026-25537
CWE-843 Medium
No
No
- 13.02.2026 SB2026021365
SB2026021366
SB2026021367
and 4 more
#VU122821 - Buffer Access with Incorrect Length Value
CVE-2026-0716
CWE-805 High
No
No
- 13.02.2026 SB2026021345
SB2026021351
SB2026021352
and 18 more
#VU122820 - Exposure of sensitive information to an unauthorized actor
CVE-2026-1707
CWE-200 Medium
No
No
- 13.02.2026 SB2026021344
SB2026021349
SB2026021350
#VU122819 - Command injection
CVE-2025-15367
CWE-77 Medium
No
No
- 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 56 more
#VU122818 - Command injection
CVE-2025-15366
CWE-77 Medium
No
No
- 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 52 more
#VU122817 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-1299
CWE-93 Medium
No
No
- 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 46 more
#VU122816 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-15282
CWE-93 Medium
No
No
- 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 25 more
#VU122815 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-0865
CWE-444 Medium
No
No
- 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 50 more
#VU122814 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-0672
CWE-93 Medium
No
No
- 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 30 more
#VU122813 - Improper input validation
CVE-2025-11468
CWE-20 Medium
No
No
- 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 25 more
#VU122663 - Stack-based buffer overflow
CVE-2026-0719
CWE-121 Critical
No
No
- 11.02.2026 SB2026021138
SB2026021139
SB2026021140
and 34 more
#VU122491 - Resource exhaustion
CVE-2025-14831
CWE-400 Medium
No
No
- 10.02.2026 SB2026021004
SB2026021048
SB2026021061
and 20 more
#VU122490 - Release of invalid pointer or reference
CVE-2026-1584
CWE-763 Medium
No
No
- 10.02.2026 SB2026021004
SB2026021048
SB2026021061
and 1 more
#VU122489 - Heap-based Buffer Overflow
CVE-2026-25646
CWE-122 High
No
No
- 10.02.2026 SB2026021002
SB2026021255
SB2026021256
and 64 more
#VU122451 - Protection Mechanism Failure
CVE-2026-25916
CWE-693 Medium
Available
No
- 08.02.2026 SB2026020801
SB2026021283
SB2026021284
and 5 more
#VU122450 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-26079
CWE-79 Medium
No
No
- 08.02.2026 SB2026020801
SB2026021283
SB2026021284
and 5 more
#VU122421 - Heap-based Buffer Overflow
CVE-2026-25749
CWE-122 High
No
No
- 05.02.2026 SB2026020601
SB2026021309
SB2026021310
and 19 more
#VU122010 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24486
CWE-22 High
No
No
- 26.01.2026 SB2026012610
SB2026021226
SB2026021232
and 10 more
#VU121565 - Resource exhaustion
CVE-2025-65637
CWE-400 Medium
No
No
- 15.01.2026 SB2026011525
SB20260116132
SB2026011920
and 35 more
#VU121279 - Deserialization of Untrusted Data
CVE-2026-21226
CWE-502 Medium
No
No
- 13.01.2026 SB2026011399
SB2026020642
SB2026020977
and 8 more


Showing elements 1961 - 1980 out of 13358