Fedora vulnerabilities
90 published CVEs name Fedora among the affected products.
- Published CVEs
- 90
- Last 12 months
- 3
- Critical
- 2
- Known exploited
- 0
Critical 2High 34Medium 50Low 4Not scored 0
CVEs per yearBy the year they were published
- 20101
- 20181
- 20191
- 202368
- 202416
- 20263
Newest CVEs
- CVE-2026-94422
xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
xdg-dbus-proxy
High8.7 - CVE-2026-19816
PackageKit: dnf5 backend ignores SIMULATE on RepoRemove
PackageKit
High7.1 - CVE-2026-19624
NetworkManager-l2tp: local privilege escalation via ipsec.conf injection
NetworkManager-l2tp
High7.8 - CVE-2024-2746
Incomplete fix for CVE-2024-1929
Fedora · dnf5daemon-server
High8.8 - CVE-2024-1929
Local Root Exploit via Configuration Dictionary
Fedora · dnf5daemon-server
High7.5 - CVE-2024-1930
No Limit on Number of Open Sessions / Bad Session Close Behaviour
Fedora · dnf5daemon-server
Medium6.5 - CVE-2023-4235
Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function
ofono
High8.1 - CVE-2023-4234
Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function
ofono
High8.1 - CVE-2023-4233
Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function
ofono
High8.1 - CVE-2023-4232
Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function
ofono
High8.1
Products with the most CVEs
Most common weaknesses
- CWE-416 Use after free10
- CWE-787 Out-of-bounds write10
- CWE-476 NULL pointer dereference8
- CWE-362 Race condition7
- CWE-119 Memory buffer bounds error6
- CWE-122 Heap-based buffer overflow6
- CWE-125 Out-of-bounds read6
- CWE-400 Uncontrolled resource consumption6
- CWE-617 Reachable assertion6
- CWE-20 Improper input validation4