Login Request a demo
FE
Vendor
Fedoraproject
19 products with CVEs on record
5,522
CVEs
88
On KEV
6
New 30D
Products
FE
Fedora
Fedoraproject
10.0
5,352 CVEs87 on KEV0 new
SS
Sssd
Fedoraproject
8.8
32 CVEs0 on KEV6 new
GR
GraphicsMagick
Fedora Project
9.8
77 CVEs1 on KEV0 new
3D
389 Directory Server
Fedoraproject
9.8
39 CVEs0 on KEV0 new
FC
Fedora Core
Fedoraproject
–
8 CVEs0 on KEV0 new
3A
389 Administration Server
Fedoraproject
4.2
1 CVEs0 on KEV0 new
AN
Anaconda
Fedoraproject
–
1 CVEs0 on KEV0 new
AI
Arm Installer
Fedoraproject
7.0
1 CVEs0 on KEV0 new
CO
Commons
Fedoraproject
–
1 CVEs0 on KEV0 new
CO
Coolkey
Fedoraproject
–
1 CVEs0 on KEV0 new
CR
Crypto-utils
Fedoraproject
–
1 CVEs0 on KEV0 new
FE
Fedmsg
Fedoraproject
7.5
1 CVEs0 on KEV0 new
FL
Fedora Linux Kernel
Fedoraproject
4.4
1 CVEs0 on KEV0 new
PY
Python-fedora
Fedoraproject
6.1
1 CVEs0 on KEV0 new
SE
Sectool
Fedoraproject
7.8
1 CVEs0 on KEV0 new
SE
Selinux-policy
Fedoraproject
4.7
1 CVEs0 on KEV0 new
SP
Spin-kickstarts
Fedoraproject
5.9
1 CVEs0 on KEV0 new
SU
Supybot-fedora
Fedoraproject
5.3
1 CVEs0 on KEV0 new
UN
Unbound
Fedoraproject
7.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-104045
SS
Sssd
Fedoraproject
4.7
0%
Oct 6Sssd: sssd: denial of service via race condition in autofs responder
CVE-2026-104046
SS
Sssd
Fedoraproject
6.2
0%
Oct 6Sssd: sssd: denial of service via incomplete identity provider authentication requests
CVE-2026-104048
SS
Sssd
Fedoraproject
8.1
0%
Oct 6Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
CVE-2026-104047
SS
Sssd
Fedoraproject
5.3
0%
Oct 6Sssd: sssd: information disclosure via query injection in entra id lookups
CVE-2026-88252
SS
Sssd
Fedoraproject
5.5
0%
Oct 6Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion
CVE-2026-104040
SS
Sssd
Fedoraproject
6.1
0%
Oct 6Sssd: sssd: information disclosure via odata injection in entra id lookups
CVE-2026-90462
SS
Sssd
Fedoraproject
5.4
0%
Sep 22Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
CVE-2026-90996
SS
Sssd
Fedoraproject
5.5
0%
Sep 14Sssd: sssd: denial of service in nss responder via crafted zero-length requests
CVE-2026-90995
SS
Sssd
Fedoraproject
5.5
0%
Sep 14Sssd: sssd: local denial of service due to null pointer dereference in pam responder
CVE-2026-77118
GR
GraphicsMagick
Fedora Project
8.4
0%
Aug 20Out-of-bounds write in GraphicsMagick PCD decoder
CVE-2026-68743
SS
Sssd
Fedoraproject
7.1
0%
Aug 4Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1
CVE-2026-68744
SS
Sssd
Fedoraproject
3.3
0%
Aug 4Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply
CVE-2026-68742
SS
Sssd
Fedoraproject
5.5
0%
Aug 3Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
CVE-2026-12610
SS
Sssd
Fedoraproject
6.4
0%
Jun 30Sssd: use-after-free crash in sssd' 'sssd_pam' process
CVE-2026-54231
FE
Fedora
Fedoraproject
5.5
0%
Jun 13Abrt: unsanitized systemd journal content written to dump directory files enables content injection
CVE-2026-54230
FE
Fedora
Fedoraproject
7.8
0%
Jun 13Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites
CVE-2026-6245
SS
Sssd
Fedoraproject
5.5
0%
Apr 15A flaw was found in the System Security Services Daemon (SSSD)
CVE-2026-35094
FE
Fedora
Fedoraproject
5.5
0%
Apr 1A flaw was found in libinput
CVE-2026-35093
FE
Fedora
Fedoraproject
8.8
0%
Apr 1A flaw was found in libinput
CVE-2023-4134
FE
Fedora
Fedoraproject
5.5
0%
Nov 14A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel
CVE-2024-3056
FE
Fedora
Fedoraproject
7.7
1%
Aug 2A flaw was found in Podman
CVE-2024-6293
FE
Fedora
Fedoraproject
8.8
1%
Jun 24Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
CVE-2024-6292
FE
Fedora
Fedoraproject
8.8
1%
Jun 24Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
CVE-2024-6291
FE
Fedora
Fedoraproject
8.8
1%
Jun 24Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
CVE-2024-6290
FE
Fedora
Fedoraproject
8.8
1%
Jun 24Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
CVE-2024-38277
FE
Fedora
Fedoraproject
5.4
0%
Jun 18A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two
CVE-2024-38276
FE
Fedora
Fedoraproject
8.8
0%
Jun 18Incorrect CSRF token checks resulted in multiple CSRF risks
CVE-2024-38274
FE
Fedora
Fedoraproject
6.1
0%
Jun 18Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt
CVE-2024-38273
FE
Fedora
Fedoraproject
5.4
0%
Jun 18Insufficient capability checks meant it was possible for users to gain access to BigBlueButton join URLs they did not have permission to access
CVE-2024-5847
FE
Fedora
Fedoraproject
8.8
0%
Jun 11Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file
CVE-2024-5846
FE
Fedora
Fedoraproject
8.8
0%
Jun 11Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file
CVE-2024-5845
FE
Fedora
Fedoraproject
8.8
0%
Jun 11Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file
CVE-2024-5844
FE
Fedora
Fedoraproject
8.8
1%
Jun 11Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page
CVE-2024-5843
FE
Fedora
Fedoraproject
6.5
0%
Jun 11Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file
CVE-2024-5842
FE
Fedora
Fedoraproject
8.8
0%
Jun 11Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds…
CVE-2024-5841
FE
Fedora
Fedoraproject
8.8
5%
Jun 11Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
CVE-2024-5840
FE
Fedora
Fedoraproject
6.5
0%
Jun 11Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page
CVE-2024-5839
FE
Fedora
Fedoraproject
6.5
0%
Jun 11Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
CVE-2024-5838
FE
Fedora
Fedoraproject
8.8
1%
Jun 11Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page
CVE-2024-5837
FE
Fedora
Fedoraproject
8.8
1%
Jun 11Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page
CVE-2024-5836
FE
Fedora
Fedoraproject
8.8
0%
Jun 11Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary…
CVE-2024-5835
FE
Fedora
Fedoraproject
8.8
1%
Jun 11Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit…
CVE-2024-5834
FE
Fedora
Fedoraproject
8.8
1%
Jun 11Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page
CVE-2024-5833
FE
Fedora
Fedoraproject
8.8
1%
Jun 11Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page
CVE-2024-5832
FE
Fedora
Fedoraproject
8.8
0%
Jun 11Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
CVE-2024-5831
FE
Fedora
Fedoraproject
8.8
0%
Jun 11Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
CVE-2024-5830
FE
Fedora
Fedoraproject
8.8
1%
Jun 11Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page
CVE-2024-2408
FE
Fedora
Fedoraproject
5.9
1%
Jun 9The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default), is vulnerable to the Marvin Attack unless it is used with an…
CVE-2024-4577
RansomwareIn wildKEV
FE
Fedora
Fedoraproject
9.8
100%
Jun 9Argument Injection in PHP-CGI
CVE-2024-5585
FE
Fedora
Fedoraproject
8.8
29%
Jun 9In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces
CVE-2024-5458
FE
Fedora
Fedoraproject
5.3
12%
Jun 9In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating…
CVE-2024-5499
FE
Fedora
Fedoraproject
8.8
1%
May 30Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page
CVE-2024-5498
FE
Fedora
Fedoraproject
8.8
1%
May 30Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
CVE-2024-5497
FE
Fedora
Fedoraproject
8.8
1%
May 30Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially…
CVE-2024-5496
FE
Fedora
Fedoraproject
8.8
1%
May 30Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page
CVE-2024-5495
FE
Fedora
Fedoraproject
8.8
1%
May 30Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
CVE-2024-5494
FE
Fedora
Fedoraproject
8.8
1%
May 30Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
CVE-2024-5493
FE
Fedora
Fedoraproject
8.8
1%
May 30Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
CVE-2024-35200
FE
Fedora
Fedoraproject
5.3
1%
May 29When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate
CVE-2024-34161
FE
Fedora
Fedoraproject
5.3
1%
May 29When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum Transmission Unit (MTU) of 4096 or greater without…