Known vulnerabilities in fwupd

Vendor: fwupd.org
Software: fwupd
Software CPE: cpe:2.3:a:fwupd.org:fwupd:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting fwupd fwupd is affected by 6 known vulnerabilities: 6 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140589 - Improper Authorization
CWE-285 Low
No
No
2.1.7 26.07.2026 SB2026073115
#VU140590 - Improper Access Control
CWE-284 Low
No
No
2.1.7 26.07.2026 SB2026073115
#VU140591 - Improper Authorization
CWE-285 Low
No
No
2.1.7 26.07.2026 SB2026073115
#VU122453 - Out-of-bounds read
CWE-125 Low
Available
No
2.1.2 09.02.2026 SB2026020917
#VU122226 - Missing Authorization
CWE-862 Low
Available
No
2.0.20 02.02.2026 SB2026020278
#VU75912 - Weak Password Requirements
CVE-2022-3287
CWE-521 Low
No
No
1.8.5 09.05.2023 SB20230509102
SB20230509107
SB2023042426
and 5 more