Skip to content
Fedoraproject vulnerabilities
Newest
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via race condition in autofs responder
CVE-2026-104045
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via incomplete identity provider authentication requests
CVE-2026-104046
6.2 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
CVE-2026-104048
6.8 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: information disclosure via query injection in entra id lookups
CVE-2026-104047
5.3 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion
CVE-2026-88252
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder
CVE-2026-104039
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via unprivileged autofs cache invalidation
CVE-2026-104032
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via memory exhaustion in autofs responder
CVE-2026-104031
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via out-of-bounds read in autofs responder
CVE-2026-104029
3.3 Low
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via out-of-bounds read during passkey parsing
CVE-2026-104030
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
CVE-2026-90462
5.4 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service in nss responder via crafted zero-length requests
CVE-2026-90996
4.0 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: local denial of service due to null pointer dereference in pam responder
CVE-2026-90995
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1
CVE-2026-68743
Fix available
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply
CVE-2026-68744
Fix available
3.3 Low
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
CVE-2026-68742
Fix available
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +8 more +10 more
Sssd: use-after-free crash in sssd' 'sssd_pam' process
CVE-2026-12610
Fix available
6.4 Medium
-
fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +9 more +11 more
Abrt: unsanitized systemd journal content written to dump directory files enables content injection
CVE-2026-54231
5.5 Medium
-
fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +10 more +12 more
Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites
CVE-2026-54230
Fix available
7.0 High
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more
Sssd: out-of-bounds read in the sssd
CVE-2026-6245
Fix available
5.5 Medium
-
freedesktop libinput, fedoraproject fedora, red hat enterprise linux 10 +3 more +5 more
Libinput: libinput: information disclosure via dangling pointer in lua plugin handling
CVE-2026-35094
Fix available
3.3 Low
-
freedesktop libinput, fedoraproject fedora, red hat enterprise linux 10 +3 more +5 more
Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins
CVE-2026-35093
Fix available
8.8 High
-
podman project podman, fedoraproject fedora, red hat enterprise linux 10 +7 more +9 more
Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack
CVE-2024-3056
Fix available
7.7 High
-
google chrome, fedoraproject fedora +1 more
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to...
CVE-2024-6293
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to...
CVE-2024-6292
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker...
CVE-2024-6291
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to...
CVE-2024-6290
Fix available
8.8 High
-
moodle, fedoraproject fedora +1 more
moodle: QR login key and auto-login key for the Moodle mobile app should be generated as separate keys
CVE-2024-38277
Fix available
5.4 Medium
-
moodle, fedoraproject fedora +1 more
moodle: CSRF risks due to misuse of confirm_sesskey
CVE-2024-38276
Fix available
8.8 High
-
moodle, fedoraproject fedora +1 more
moodle: stored XSS via calendar's event title when deleting the event
CVE-2024-38274
Fix available
6.1 Medium
-
moodle, fedoraproject fedora +1 more
moodle: BigBlueButton web service leaks meeting joining information to users who should not have access
CVE-2024-38273
Fix available
5.4 Medium
-
google chrome, fedoraproject fedora +1 more
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to...
CVE-2024-5847
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to...
CVE-2024-5846
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to...
CVE-2024-5845
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote...
CVE-2024-5844
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a...
CVE-2024-5843
Fix available
6.5 Medium
-
google chrome, fedoraproject fedora +1 more
Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker...
CVE-2024-5842
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to...
CVE-2024-5841
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass...
CVE-2024-5840
Fix available
6.5 Medium
-
google chrome, fedoraproject fedora +1 more
Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed...
CVE-2024-5839
Fix available
6.5 Medium
-
google chrome, fedoraproject fedora +1 more
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform...
CVE-2024-5838
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to...
CVE-2024-5837
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an...
CVE-2024-5836
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote...
CVE-2024-5835
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote...
CVE-2024-5834
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to...
CVE-2024-5833
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to...
CVE-2024-5832
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to...
CVE-2024-5831
Fix available
8.8 High
-
google chrome, fedoraproject fedora +1 more
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform...
CVE-2024-5830
Fix available
8.8 High
-
composer, fedoraproject fedora +1 more
Composer vulnerable to command injection via malicious git/hg branch names
CVE-2024-35242
Public exploitFix available
8.8 High
- Show olderLoading…