Fedoraproject Fedora vulnerabilities

• fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +9 more +11 more Abrt: unsanitized systemd journal content written to dump directory files enables content injection CVE-2026-54231 5.5 MediumJune 13, 2026
• fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +10 more +12 more Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites CVE-2026-54230 Fix available 7.0 HighJune 13, 2026
• freedesktop libinput, fedoraproject fedora, red hat enterprise linux 10 +3 more +5 more Libinput: libinput: information disclosure via dangling pointer in lua plugin handling CVE-2026-35094 Fix available 3.3 LowApril 1, 2026
• freedesktop libinput, fedoraproject fedora, red hat enterprise linux 10 +3 more +5 more Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins CVE-2026-35093 Fix available 8.8 HighApril 1, 2026
• podman project podman, fedoraproject fedora, red hat enterprise linux 10 +7 more +9 more Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack CVE-2024-3056 Fix available 7.7 HighAugust 2, 2024
• google chrome, fedoraproject fedora +1 more Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to... CVE-2024-6293 Fix available 8.8 HighJune 24, 2024
• google chrome, fedoraproject fedora +1 more Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to... CVE-2024-6292 Fix available 8.8 HighJune 24, 2024
• google chrome, fedoraproject fedora +1 more Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker... CVE-2024-6291 Fix available 8.8 HighJune 24, 2024
• google chrome, fedoraproject fedora +1 more Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to... CVE-2024-6290 Fix available 8.8 HighJune 24, 2024
• moodle, fedoraproject fedora +1 more moodle: QR login key and auto-login key for the Moodle mobile app should be generated as separate keys CVE-2024-38277 Fix available 5.4 MediumJune 18, 2024
• moodle, fedoraproject fedora +1 more moodle: CSRF risks due to misuse of confirm_sesskey CVE-2024-38276 Fix available 8.8 HighJune 18, 2024
• moodle, fedoraproject fedora +1 more moodle: stored XSS via calendar's event title when deleting the event CVE-2024-38274 Fix available 6.1 MediumJune 18, 2024
• moodle, fedoraproject fedora +1 more moodle: BigBlueButton web service leaks meeting joining information to users who should not have access CVE-2024-38273 Fix available 5.4 MediumJune 18, 2024
• google chrome, fedoraproject fedora +1 more Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to... CVE-2024-5847 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to... CVE-2024-5846 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to... CVE-2024-5845 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote... CVE-2024-5844 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a... CVE-2024-5843 Fix available 6.5 MediumJune 11, 2024
• google chrome, fedoraproject fedora +1 more Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker... CVE-2024-5842 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to... CVE-2024-5841 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass... CVE-2024-5840 Fix available 6.5 MediumJune 11, 2024
• google chrome, fedoraproject fedora +1 more Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed... CVE-2024-5839 Fix available 6.5 MediumJune 11, 2024
• google chrome, fedoraproject fedora +1 more Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform... CVE-2024-5838 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to... CVE-2024-5837 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an... CVE-2024-5836 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote... CVE-2024-5835 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote... CVE-2024-5834 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to... CVE-2024-5833 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to... CVE-2024-5832 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to... CVE-2024-5831 Fix available 8.8 HighJune 11, 2024
• google chrome, fedoraproject fedora +1 more Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform... CVE-2024-5830 Fix available 8.8 HighJune 11, 2024
• composer, fedoraproject fedora +1 more Composer vulnerable to command injection via malicious git/hg branch names CVE-2024-35242 Public exploitFix available 8.8 HighJune 10, 2024
• composer, fedoraproject fedora +1 more Composer vulnerable to command injection via malicious git branch name CVE-2024-35241 Fix available 8.8 HighJune 10, 2024
• php, fedoraproject fedora +1 more Argument Injection in PHP-CGI CVE-2024-4577 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalJune 9, 2024
• php, fedoraproject fedora +1 more Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) CVE-2024-5585 Fix available EPSS 28.8% 7.7 HighJune 9, 2024
• php, fedoraproject fedora +1 more Filter bypass in filter_var (FILTER_VALIDATE_URL) CVE-2024-5458 Fix available EPSS 12.1% 5.3 MediumJune 9, 2024
• moodle, fedoraproject fedora +1 more moodle: unsanitized HTML in site log for config_log_created CVE-2024-34006 Fix available 4.3 MediumMay 31, 2024
• google chrome, fedoraproject fedora +1 more Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote... CVE-2024-5499 Fix available 8.8 HighMay 30, 2024
• google chrome, fedoraproject fedora +1 more Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote... CVE-2024-5498 Fix available 8.8 HighMay 30, 2024
• google chrome, fedoraproject fedora +1 more Out of bounds memory access in Keyboard Inputs in Google Chrome prior to 125.0.6422.141 allowed a... CVE-2024-5497 Fix available 8.8 HighMay 30, 2024
• google chrome, fedoraproject fedora +1 more Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote... CVE-2024-5496 Fix available 8.8 HighMay 30, 2024
• google chrome, fedoraproject fedora +1 more Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to... CVE-2024-5495 Fix available 8.8 HighMay 30, 2024
• google chrome, fedoraproject fedora +1 more Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to... CVE-2024-5494 Fix available 8.8 HighMay 30, 2024
• google chrome, fedoraproject fedora +1 more Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker... CVE-2024-5493 Fix available 8.8 HighMay 30, 2024
• f5 nginx, nginx plus, nginx open source +1 more +3 more NGINX HTTP/3 QUIC vulnerability CVE-2024-35200 Fix available 5.3 MediumMay 29, 2024
• f5 nginx, nginx plus, nginx open source +1 more +3 more NGINX HTTP/3 QUIC vulnerability CVE-2024-34161 Fix available 5.3 MediumMay 29, 2024
• f5 nginx, nginx plus, nginx open source +1 more +3 more NGINX HTTP/3 QUIC vulnerability CVE-2024-32760 Fix available 6.5 MediumMay 29, 2024
• f5 nginx, nginx plus, nginx open source +1 more +3 more NGINX HTTP/3 QUIC vulnerability CVE-2024-31079 Fix available 4.8 MediumMay 29, 2024
• google chrome, fedoraproject fedora, google chromium v8 +2 more chromium - security update CVE-2024-5274 In KEVPublic exploitFix available 9.6 CriticalMay 24, 2024
• google chrome, fedoraproject fedora +1 more Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to... CVE-2024-5160 Fix available 8.8 HighMay 22, 2024
• Show olderLoading…