Fedora Fedora

• CVE-2026-94422 High 8.8 xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape 0.5%
• CVE-2026-19816 High 7.1 PackageKit: dnf5 backend ignores SIMULATE on RepoRemove 0.1%
• CVE-2026-19624 High 7.8 NetworkManager-l2tp: local privilege escalation via ipsec.conf injection 0.1%
• CVE-2023-4235 High 8.1 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function 0.9%
• CVE-2023-4234 High 8.1 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function 1.1%
• CVE-2023-4233 High 8.1 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function 1.0%
• CVE-2023-4232 High 8.1 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function 1.0%
• CVE-2023-3966 High 7.5 Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet 1.3%
• CVE-2024-1312 Medium 5.1 Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu 0.2%
• CVE-2021-4435 High 7.7 Yarn: untrusted search path 0.3%
• CVE-2023-6780 Medium 5.3 Glibc: integer overflow in __vsyslog_internal() 2.7%
• CVE-2023-6779 High 8.2 Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() 3.2%
• CVE-2023-6246 High 8.4 Glibc: heap-based buffer overflow in __vsyslog_internal() 4.8%
• CVE-2023-6258 High 8.1 Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths 0.6%
• CVE-2023-6200 High 7.5 Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability 2.0%
• CVE-2023-6395 Medium 6.7 Mock: privilege escalation for users that can access mock configuration 1.6%
• CVE-2023-7090 Medium 6.6 Sudo: improper handling of ipa_hostname leads to privilege mismanagement 0.7%
• CVE-2023-4255 Medium 5.5 W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223) 0.3%
• CVE-2023-4256 Medium 5.5 Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c 0.3%
• CVE-2023-3430 High 7.5 Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp 1.2%
• CVE-2023-6560 Medium 5.5 Kernel: io_uring out of boundary memory access in __io_uaddr_map() 0.3%
• CVE-2023-5972 High 7.0 Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c 0.3%
• CVE-2023-6238 Medium 6.7 Kernel: nvme: memory corruption via unprivileged user passthrough 0.3%
• CVE-2023-6039 Medium 5.5 Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect 0.3%
• CVE-2023-4154 High 7.5 Samba: ad dc password exposure to privileged users and rodcs 1.4%
• CVE-2023-1194 High 7.1 Use-after-free in parse_lease_state() 1.1%
• CVE-2022-4900 Medium 6.2 Potential buffer overflow in php_cli_server_startup_workers 0.4%
• CVE-2023-38473 Medium 6.2 Reachable assertion in avahi_alternative_host_name 0.3%
• CVE-2023-38472 Medium 6.2 Reachable assertion in avahi_rdata_parse 0.3%
• CVE-2023-38471 Medium 6.2 Reachable assertion in dbus_set_host_name 0.3%
• CVE-2023-38470 Medium 6.2 Reachable assertion in avahi_escape_label 0.3%
• CVE-2023-38469 Medium 6.2 Reachable assertion in avahi_dns_packet_append_record 0.3%
• CVE-2023-3164 Medium 5.5 Heap-buffer-overflow in extractimagesection() 0.3%
• CVE-2023-1193 Medium 6.5 Use-after-free in setup_async_work() 1.0%
• CVE-2023-1192 Medium 6.5 Use-after-free in smb2_is_status_io_timeout() 1.1%
• CVE-2023-5349 Medium 5.3 Draw while calling getdrawinfo() 0.7%
• CVE-2023-42752 Medium 5.5 Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access 0.3%
• CVE-2023-5366 High 7.1 Openvswitch don't match packets on nd_target field 0.4%
• CVE-2022-4132 Medium 5.9 Memory leak on tls connections 0.7%
• CVE-2023-3153 Medium 5.3 Service monitor mac flow is not rate limited 1.0%
• CVE-2023-4156 Medium 4.4 Heap out of bound read in builtin.c 0.4%
• CVE-2023-5158 Medium 6.5 Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c 0.2%
• CVE-2023-25584 Medium 6.3 Out of bounds read in parse_module function in bfd/vms-alpha.c 0.4%
• CVE-2023-25585 Medium 4.7 Field `file_table` of `struct module *module` is uninitialized 0.4%
• CVE-2023-25586 Medium 4.7 Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized 0.3%
• CVE-2023-25588 Medium 4.7 Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab` 0.4%
• CVE-2023-32665 Medium 5.5 Gvariant deserialisation does not match spec for non-normal data 0.4%
• CVE-2023-2680 High 7.5 Dma reentrancy issue (incomplete fix for cve-2021-3750) 0.2%
• CVE-2023-4155 Medium 5.3 Sev-es / sev-snp vmgexit double fetch vulnerability 0.2%
• CVE-2023-3301 Medium 5.6 Triggerable assertion due to race condition in hot-unplug 0.3%