Sudo project Sudo

• CVE-2025-32463 Critical 9.3 Exploited Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. 56.3%
• CVE-2026-82474 High 7.8 Sudo through 1.9.17p2 Intercept Policy Bypass via execveat 0.2%
• CVE-2026-35535 High 7.4 In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation. 0.2%
• CVE-2025-32462 Low 2.8 Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines. 4.5%