Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Fedora vulnerabilities

90 published CVEs name Fedora among the affected products.

Published CVEs
90
Last 12 months
3
Critical
2
Known exploited
0

Critical 2High 34Medium 50Low 4Not scored 0

CVEs per yearBy the year they were published

  1. 20101
  2. 20181
  3. 20191
  4. 202368
  5. 202416
  6. 20263

Newest CVEs

  • CVE-2026-94422

    xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

    xdg-dbus-proxy

    High8.7
  • CVE-2026-19816

    PackageKit: dnf5 backend ignores SIMULATE on RepoRemove

    PackageKit

    High7.1
  • CVE-2026-19624

    NetworkManager-l2tp: local privilege escalation via ipsec.conf injection

    NetworkManager-l2tp

    High7.8
  • CVE-2024-2746

    Incomplete fix for CVE-2024-1929

    Fedora · dnf5daemon-server

    High8.8
  • CVE-2024-1929

    Local Root Exploit via Configuration Dictionary

    Fedora · dnf5daemon-server

    High7.5
  • CVE-2024-1930

    No Limit on Number of Open Sessions / Bad Session Close Behaviour

    Fedora · dnf5daemon-server

    Medium6.5
  • CVE-2023-4235

    Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function

    ofono

    High8.1
  • CVE-2023-4234

    Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function

    ofono

    High8.1
  • CVE-2023-4233

    Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function

    ofono

    High8.1
  • CVE-2023-4232

    Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function

    ofono

    High8.1