Known vulnerabilities in fwupd
Vendor:
fwupd.org
Software:
fwupd
Software CPE:
cpe:2.3:a:fwupd.org:fwupd:*:*:*:*:*:*:*:*
Website:
https://fwupd.org
Total vulnerabilities:
6
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
2.1.7
2.1.6
2.0.21
2.1.5
2.1.4
2.1.3
2.1.2
2.0.20
1.9.34
2.1.1
2.0.19
2.0.18
1.9.33
2.0.17
2.0.16
2.0.15
1.9.32
2.0.14
2.0.13
1.9.31
2.0.12
2.0.11
2.0.10
2.0.9
1.9.30
2.0.8
2.0.7
1.9.29
2.0.6
2.0.5
1.9.28
2.0.4
2.0.3
1.9.27
2.0.2
2.0.1
1.9.26
2.0.0
1.9.25
1.9.24
1.9.23
1.9.22
1.9.21
1.9.20
1.9.19
1.9.18
1.9.17
1.9.16
1.9.15
1.9.14
1.9.13
1.9.12
1.9.11
1.9.10
1.9.9
1.9.8
1.9.7
1.9.6
1.9.5
1.9.4
1.9.3
1.8.17
1.9.2
1.8.16
1.9.1
1.8.15
1.8.14
1.8.13
1.8.12
1.8.11
1.8.10
1.8.9
1.8.8
1.8.7
1.8.6
1.8.5
1.8.4
1.8.3
1.8.2
1.8.1
1.8.0
1.7.10
1.7.9
1.7.8
1.7.7
1.7.6
1.7.5
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.6.5
1.6.4
1.6.3
1.6.2
1.6.1
1.6.0
1.5.13
1.5.12
1.5.11
1.5.10
1.5.9
1.5.8
1.5.7
1.5.4
1.4.8
1.4.7
1.4.4
1.4.3
1.3.12
1.3.11
1.3.10
1.2.14
1.2.13
1.2.12
1.2.11
1.2.10
1.2.8
1.2.7
1.2.6
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.9
1.0.8
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
0.9.9
0.9.8
0.9.7
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.8.3
0.8.2
0.8.1
0.8.0
0.7.5
0.7.4
0.7.3
0.7.2
0.7.1
0.7.0
0.6.3
0.6.2
0.6.1
0.6.0
0.5.4
0.5.3
0.5.2
0.5.1
0.5.0
0.1.6
0.1.5
0.1.4
0.1.3
0.1.2
0.1.1
0.1.0
1.5.6
1.5.5
1.5.3
1.5.2
1.5.1
1.5.0
1.4.6
1.4.5
1.3.4
1.3.3
1.3.2
1.3.1
1.4.0
1.3.9
1.3.7
1.3.8
1.3.6
1.2.9
1.4.1
1.3.5
1.4.2
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140589 - Improper Authorization |
CWE-285 | Low | 2.1.7 | 26.07.2026 |
SB2026073115 |
||
| #VU140590 - Improper Access Control |
CWE-284 | Low | 2.1.7 | 26.07.2026 |
SB2026073115 |
||
| #VU140591 - Improper Authorization |
CWE-285 | Low | 2.1.7 | 26.07.2026 |
SB2026073115 |
||
| #VU122453 - Out-of-bounds read |
CWE-125 | Low | 2.1.2 | 09.02.2026 |
SB2026020917 |
||
| #VU122226 - Missing Authorization |
CWE-862 | Low | 2.0.20 | 02.02.2026 |
SB2026020278 |
||
| #VU75912 - Weak Password Requirements CVE-2022-3287 |
CWE-521 | Low | 1.8.5 | 09.05.2023 |
SB20230509102 SB20230509107 SB2023042426 and 5 more |