Login Request a demo
SU
Product
sudo
by sudo-project · last CVE Aug 29, 2026
On CISA KEVExploited in the wild
25
CVEs
2
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities25In the news1Timeline
Severity mix
Critical 0High 19Medium 3Low 2
Severity
All severities25Critical0High19Medium3Low2
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add sudo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-1000367
6.4
8%
Jun 5
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and…
Affected: through 1.8.20
CVE-2023-28487
5.3
1%
Mar 16
Sudo before 1.9.13 does not escape control characters in sudoreplay output
Affected: before 1.9.13
CVE-2023-28486
5.3
1%
Mar 16
Sudo before 1.9.13 does not escape control characters in log messages
Affected: before 1.9.13
Showing 3