Log in Start free

Fedora

Products

ProductCVEsExploitedLatest
Fedora82–Oct 2, 2026
Extra Packages for Enterprise Linux20–Feb 4, 2024
Fedora 377–Sep 14, 2023
Extra Packages for Enterprise Linux 75–Sep 14, 2023
Fedora 364–Sep 14, 2023
Extra Packages for Enterprise Linux 84–Sep 14, 2023
dnf5daemon-server3–May 8, 2024
Fedora 383–Sep 14, 2023
Extra Packages for Enterprise Linux (EPEL)1–Sep 14, 2026

Exploited and recent CVEs

  • CVE-2026-94422 High 8.8 xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape 0.5%
  • CVE-2026-19816 High 7.1 PackageKit: dnf5 backend ignores SIMULATE on RepoRemove 0.1%
  • CVE-2026-19624 High 7.8 NetworkManager-l2tp: local privilege escalation via ipsec.conf injection 0.1%
  • CVE-2026-19624 High 7.8 NetworkManager-l2tp: local privilege escalation via ipsec.conf injection 0.1%
  • CVE-2024-2746 High 8.8 Incomplete fix for CVE-2024-1929 0.2%
  • CVE-2024-1929 High 7.5 Local Root Exploit via Configuration Dictionary 0.3%
  • CVE-2024-1930 Medium 6.5 No Limit on Number of Open Sessions / Bad Session Close Behaviour 0.3%
  • CVE-2023-4235 High 8.1 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function 0.9%
  • CVE-2023-4234 High 8.1 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function 1.1%
  • CVE-2023-4233 High 8.1 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function 1.0%
  • CVE-2023-4232 High 8.1 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function 1.0%
  • CVE-2023-3966 High 7.5 Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet 1.3%
  • CVE-2024-1312 Medium 5.1 Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu 0.2%
  • CVE-2021-4435 High 7.7 Yarn: untrusted search path 0.3%
  • CVE-2021-4435 High 7.7 Yarn: untrusted search path 0.3%
  • CVE-2023-6780 Medium 5.3 Glibc: integer overflow in __vsyslog_internal() 2.7%
  • CVE-2023-6779 High 8.2 Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() 3.2%
  • CVE-2023-6246 High 8.4 Glibc: heap-based buffer overflow in __vsyslog_internal() 4.8%
  • CVE-2023-6258 High 8.1 Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths 0.6%
  • CVE-2023-6200 High 7.5 Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability 2.0%
  • CVE-2023-6395 Medium 6.7 Mock: privilege escalation for users that can access mock configuration 1.6%
  • CVE-2023-6395 Medium 6.7 Mock: privilege escalation for users that can access mock configuration 1.6%
  • CVE-2023-7090 Medium 6.6 Sudo: improper handling of ipa_hostname leads to privilege mismanagement 0.7%
  • CVE-2023-4255 Medium 5.5 W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223) 0.3%
  • CVE-2023-4255 Medium 5.5 W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223) 0.3%
  • CVE-2023-4256 Medium 5.5 Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c 0.3%
  • CVE-2023-4256 Medium 5.5 Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c 0.3%
  • CVE-2023-3430 High 7.5 Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp 1.2%
  • CVE-2023-3430 High 7.5 Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp 1.2%
  • CVE-2023-6560 Medium 5.5 Kernel: io_uring out of boundary memory access in __io_uaddr_map() 0.3%