Uutils

Products

ProductCVEsExploitedLatest
coreutils45–Sep 18, 2026

Exploited and recent CVEs

  • CVE-2026-93658 High 7.0 uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid 0.1%
  • CVE-2026-35381 Low 3.3 uutils coreutils cut Local Logic Error and Data Integrity Issue in Output Filtering 0.2%
  • CVE-2026-35380 Medium 5.5 uutils coreutils cut Local Logic Error and Data Integrity Issue in Delimiter Parsing 0.2%
  • CVE-2026-35379 Low 3.3 uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling 0.1%
  • CVE-2026-35378 Low 3.3 uutils coreutils expr Local Denial of Service via Eager Evaluation of Parenthesized Subexpressions 0.2%
  • CVE-2026-35377 Low 3.3 uutils coreutils env Local Denial of Service via Improper Handling of Backslashes in Split-String Mode 0.1%
  • CVE-2026-35376 Medium 4.5 uutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race Condition 0.1%
  • CVE-2026-35375 Low 3.3 uutils coreutils split Local Data Integrity Issue via Lossy Filename Encoding 0.1%
  • CVE-2026-35374 Medium 6.3 uutils coreutils split Arbitrary File Truncation via Time-of-Check to Time-of-Use (TOCTOU) Race Condition <0.1%
  • CVE-2026-35373 Low 3.3 uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 Filenames 0.1%
  • CVE-2026-35372 Medium 5.0 uutils coreutils ln Security Bypass via Improper Handling of the --no-dereference Flag 0.1%
  • CVE-2026-35371 Low 3.3 uutils coreutils id Misleading Identity Reporting in Pretty Print Mode 0.1%
  • CVE-2026-35370 Medium 4.4 uutils coreutils id Incorrect Access-Control Decisions via Misrepresented Group Membership 0.1%
  • CVE-2026-35369 Medium 5.5 uutils coreutils kill System-wide Process Termination and Denial of Service via Argument Misinterpretation 0.1%
  • CVE-2026-35368 High 7.2 uutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) Injection 0.1%
  • CVE-2026-35367 Low 3.3 uutils coreutils nohup Information Disclosure via Insecure Default Output Permissions 0.1%
  • CVE-2026-35366 Medium 4.4 uutils coreutils printenv Security Inspection Bypass via UTF-8 Enforcement 0.2%
  • CVE-2026-35365 Medium 6.6 uutils coreutils mv Denial of Service and Data Duplication via Improper Symlink Expansion 0.2%
  • CVE-2026-35364 Medium 6.3 uutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race Condition <0.1%
  • CVE-2026-35363 Medium 5.6 uutils coreutils rm Safeguard Bypass via Improper Path Normalization 0.2%
  • CVE-2026-35362 Low 3.6 uutils coreutils Missing TOCTOU Protection on Non-Linux Unix Platforms in Safe Traversal Module 0.2%
  • CVE-2026-35361 Low 3.4 uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems 0.1%
  • CVE-2026-35360 Medium 6.3 uutils coreutils touch Arbitrary File Truncation via TOCTOU Race Condition 0.1%
  • CVE-2026-35359 Medium 4.7 uutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink Swap 0.1%
  • CVE-2026-35358 Medium 4.4 uutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream Reading 0.2%
  • CVE-2026-35357 Medium 4.7 uutils coreutils cp Information Disclosure via Permission Handling Race <0.1%
  • CVE-2026-35356 Medium 6.3 uutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink Race 0.1%
  • CVE-2026-35355 Medium 6.3 uutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU Race 0.1%
  • CVE-2026-35354 Medium 4.7 uutils coreutils mv Security Xattr TOCTOU Race in Cross-Device 0.1%
  • CVE-2026-35353 Low 3.3 uutils coreutils mkdir Permission Exposure Race Condition with -m 0.1%