FE
Product
Fedora
by Fedoraproject · last CVE Jun 13, 2026
On CISA KEVExploited in the wildRansomware-linked
5,352
CVEs
87
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 439High 49Medium 11Low 1
Watch

Add Fedora to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-21166
In wildKEV
8.8
24%
Mar 9
Google Chromium Race Condition Vulnerability
Affected: 32; 33; 34
CVE-2021-21148
In wildKEV
8.8
20%
Feb 9
Google Chromium V8 Heap Buffer Overflow Vulnerability
Affected: 32; 33
CVE-2020-13671
In wildKEV
8.8
36%
Nov 20
Drupal core Un-restricted Upload of File
Affected: 32; 33
CVE-2020-16009
In wildKEV
8.8
48%
Nov 3
Google Chromium V8 Type Confusion Vulnerability
Affected: 32; 33
CVE-2020-6418
In wildKEV
8.8
79%
Feb 27
Google Chromium V8 Type Confusion Vulnerability
Affected: 30; 31
CVE-2021-39144
In wildKEV
8.5
98%
Aug 23
XStream is vulnerable to a Remote Command Execution attack
Affected: 33; 34; 35
CVE-2024-1086
RansomwareIn wildKEV
7.8
28%
Jan 31
Use-after-free in Linux kernel's netfilter: nf_tables component
Affected: 39
CVE-2023-7101
In wildKEV
7.8
19%
Dec 24
Arbitrary Code Execution (ACE) Vulnerability
Affected: 38; 39
CVE-2023-4911
In wildKEV
7.8
64%
Oct 3
Glibc: buffer overflow in ld.so leading to privilege escalation
Affected: 37; 38; 39
CVE-2022-0995
In wildKEV
7.8
9%
Mar 25
Linux Kernel Out-of-Bounds Write Vulnerability
Affected: 35
CVE-2022-0847
In wildKEV
7.8
93%
Mar 7
Linux Kernel Privilege Escalation Vulnerability
Affected: 35
CVE-2022-0492
In wildKEV
7.8
6%
Mar 3
Linux Kernel Improper Authentication Vulnerability
Affected: 35
CVE-2021-30952
In wildKEV
7.8
7%
Aug 24
Apple Multiple Products Integer Overflow or Wraparound Vulnerability
Affected: 34; 35
CVE-2021-22204
In wildKEV
7.8
100%
Apr 23
ExifTool Remote Code Execution Vulnerability
Affected: 32; 33; 34
CVE-2021-3156
In wildKEV
7.8
100%
Jan 26
Sudo Heap-Based Buffer Overflow Vulnerability
Affected: 32; 33
CVE-2020-28949
In wildKEV
7.8
85%
Nov 19
PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
Affected: 32; 33; 34; 35
CVE-2019-13272
In wildKEV
7.8
52%
Jul 17
Linux Kernel Improper Privilege Management Vulnerability
Affected: 29
CVE-2019-0211
In wildKEV
7.8
65%
Apr 8
Apache HTTP Server Privilege Escalation Vulnerability
Affected: 28; 29; 30
CVE-2023-38180
In wildKEV
7.5
14%
Aug 8
.NET and Visual Studio Denial of Service Vulnerability
Affected: 37; 38
CVE-2020-36193
In wildKEV
7.5
71%
Jan 18
PEAR Archive_Tar Improper Link Resolution Vulnerability
Affected: 32; 33; 34; 35
CVE-2019-5418
In wildKEV
7.5
99%
Mar 27
Rails Ruby on Rails Path Traversal Vulnerability
Affected: 30
CVE-2015-5477
In wildKEV
7.5
100%
Jul 29
ISC BIND Data Processing Errors Vulnerability
Affected: 21; 22
CVE-2014-0160
In wildKEV
7.5
100%
Apr 7
OpenSSL Information Disclosure Vulnerability
Affected: 19; 20
CVE-2021-39226
In wildKEV
7.3
100%
Oct 5
Snapshot authentication bypass in grafana
Affected: 34; 35
CVE-2016-5195
In wildKEV
7.0
84%
Nov 10
Linux Kernel Race Condition Vulnerability
Affected: 23; 24; 25
CVE-2023-42916
In wildKEV
6.5
18%
Nov 30
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
Affected: 38; 39
CVE-2022-2856
In wildKEV
6.5
5%
Sep 26
Google Chromium Intents Insufficient Input Validation Vulnerability
Affected: 37
CVE-2021-37976
In wildKEV
6.5
20%
Oct 8
Google Chromium Information Disclosure Vulnerability
Affected: 33; 34; 35
CVE-2021-30533
In wildKEV
6.5
17%
Jun 7
Google Chromium PopupBlocker Security Bypass Vulnerability
Affected: 33; 34
CVE-2021-38000
In wildKEV
6.1
5%
Nov 23
Google Chromium Intents Improper Input Validation Vulnerability
Affected: 34
CVE-2020-35730
In wildKEV
6.1
33%
Dec 28
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
Affected: 32; 33
CVE-2020-13965
In wildKEV
6.1
77%
Jun 9
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
Affected: 31; 32
CVE-2020-11023
In wildKEV
6.1
85%
Apr 29
Potential XSS vulnerability in jQuery
Affected: 31; 32; 33
CVE-2020-1472
RansomwareIn wildKEV
5.5
99%
Aug 17
Netlogon Elevation of Privilege Vulnerability
Affected: 31; 32; 33
CVE-2023-5631
In wildKEV
5.4
76%
Oct 18
Stored XSS vulnerability in Roundcube
Affected: 39
CVE-2022-23134
In wildKEV
5.3
95%
Jan 13
Possible view of the setup pages by unauthenticated users if config file already exists
Affected: 34; 35
CVE-2023-20867
In wildKEV
3.9
14%
Jun 13
VMware Tools Authentication Bypass Vulnerability
Affected: 37; 38; 39
CVE-2024-24576
10.0
20%
Apr 9
Rust is a programming language
Affected: 38; 39; 40
CVE-2023-3432
10.0
1%
Jun 27
Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9
Affected: 39
CVE-2021-41556
10.0
3%
Jul 28
sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Execution
Affected: 35; 36
CVE-2022-30292
10.0
4%
May 4
Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call
Affected: 35; 36
CVE-2020-13753
10.0
3%
Jul 14
The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl
Affected: 31
CVE-2024-2044
9.9
79%
Mar 7
pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code
Affected: 40
CVE-2021-3781
9.9
84%
Feb 16
A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command
Affected: 34
CVE-2021-21345
9.9
72%
Mar 22
XStream is vulnerable to a Remote Command Execution attack
Affected: 33; 34; 35
CVE-2024-36048
9.8
1%
May 18
QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to…
Affected: 39; 40
CVE-2024-34502
9.8
0%
May 5
An issue was discovered in WikibaseLexeme in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1
Affected: 40
CVE-2023-47212
9.8
1%
May 1
A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22
Affected: 38; 39; 40
CVE-2024-22391
9.8
1%
Apr 25
A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23
Affected: 38; 39; 40
CVE-2024-22373
9.8
2%
Apr 25
An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23
Affected: 38; 39; 40
Page 2 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)