Skip to contentFedoraproject Fedora vulnerabilities
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96...CVE-2023-4364Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebShare in Google Chrome on Android prior to 116.0.5845.96...CVE-2023-4363Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96...CVE-2023-4361Fix available5.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote...CVE-2023-4360Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in App Launcher in Google Chrome on iOS prior to 116.0.5845.96...CVE-2023-4359Fix available5.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to...CVE-2023-4358Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed...CVE-2023-4357Public exploitFix availableEPSS 47.1%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has...CVE-2023-4356Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote...CVE-2023-4355Fix availableEPSS 27.7%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker...CVE-2023-4354Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker...CVE-2023-4353Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to...CVE-2023-4352Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who...CVE-2023-4351Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Fullscreen in Google Chrome on Android prior to 116.0.5845.96...CVE-2023-4350Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a...CVE-2023-4349Fix available8.8 High
- node.js, nodejs node, fedoraproject fedora +2 more`fs.mkdtemp()` and `fs.mkdtempSync()` can be used to bypass the permission model check using a...CVE-2023-32003Fix available5.3 Medium
- node.js, nodejs node, fedoraproject fedora +2 moreA vulnerability has been discovered in Node.js version 20, specifically within the experimental...CVE-2023-32004Fix available8.8 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreHeap-based Buffer Overflow in radareorg/radare2CVE-2023-43227.3 High
- node.js, nodejs node, fedoraproject fedora +2 moreThe use of `module.constructor.createRequire()` can bypass the policy mechanism and require...CVE-2023-32006Fix available8.8 High
- php, debian linux, fedoraproject fedora +2 moreBuffer overflow and overread in phar_dir_read()CVE-2023-3824Public exploitFix availableEPSS 21.8%9.4 Critical
- php, debian linux, fedoraproject fedora +2 moreSecurity issue with external entity loading in XML without enabling itCVE-2023-3823Fix available8.6 High
- fedoraproject fedora, intel onevpl gpu runtime +1 moreImproper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5...CVE-2023-228403.3 Low
- fedoraproject fedora, intel onevpl gpu runtime +1 moreOut-of-bounds read in some Intel(R) oneVPL GPU software before version 22.6.5 may allow an...CVE-2023-223384.4 Medium
- intel killer, debian linux, fedoraproject fedora +2 more +4 moreImproper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may...CVE-2022-38076Fix available3.8 Low
- intel killer, debian linux, fedoraproject fedora +2 more +4 moreImproper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may...CVE-2022-36351Fix available4.3 Medium
- intel corporation intel(r) proset/wireless wifi software, debian linux, fedoraproject fedora +3 more +5 moreProtection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a...CVE-2022-46329Fix available8.2 High
- intel killer, debian linux, fedoraproject fedora +2 more +4 moreImproper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may...CVE-2022-40964Fix available7.9 High
- intel killer, debian linux, fedoraproject fedora +2 more +4 moreImproper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may...CVE-2022-27635Fix available8.2 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: exfat: stack overflow in exfat_get_uniname_from_ext_entryCVE-2023-4273Fix available6.0 Medium
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreSev-es / sev-snp vmgexit double fetch vulnerabilityCVE-2023-4155Fix available5.3 Medium
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon gold pro 3150g firmware +49 more +51 moreSpeculative LeaksCVE-2023-20588Fix availableEPSS 11.2%5.5 Medium
- ryzen™ pro 5000 series desktop processors, amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors +178 more +180 moreA side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the...CVE-2023-20569Fix available4.7 Medium
- gnu gawk, fedora, red hat enterprise linux 6 +4 more +6 moreHeap out of bound read in builtin.cCVE-2023-4156Fix available4.4 Medium
- imagemagick, fedoraproject fedora +1 moreImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption)...CVE-2023-39978Fix available3.3 Low
- microsoft .net, fedoraproject fedora, microsoft .net 6.0 +8 more +10 more.NET and Visual Studio Denial of Service VulnerabilityCVE-2023-38180In KEVFix availableEPSS 14.1%7.5 High
- debian linux, fedoraproject fedora, intel microcode +136 more +138 moreImproper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a...CVE-2023-23908Fix available6.0 Medium
- debian linux, fedoraproject fedora, intel xeon bronze 3408u firmware +189 more +191 moreUnauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors...CVE-2022-41804Fix available7.2 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuidCVE-2023-4194Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-freeCVE-2023-4147Public exploitFix available7.8 High
- qemu, fedora extra packages for enterprise linux, fedora +5 more +7 moreOut-of-bounds read information disclosure vulnerabilityCVE-2023-4135Fix available6.0 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreKernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()CVE-2023-4134Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: smsusb: use-after-free caused by do_submit_urb()CVE-2023-4132Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreKernel: cxgb4: use-after-free in ch_flower_stats_cb()CVE-2023-4133Fix available5.5 Medium
- qemu, debian linux, fedora extra packages for enterprise linux +6 more +8 moreHeap buffer overflow in virtio_crypto_sym_op_helper()CVE-2023-3180Fix available6.0 Medium
- rust-lang cargo, fedoraproject fedora +1 moreCargo not respecting umask when extracting crate archivesCVE-2023-38497Public exploitFix available7.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a...CVE-2023-4073Fix available8.8 High
- golang image, golang.org/x/image golang.org/x/image/tiff, fedoraproject fedora +2 moreExcessive CPU consumption when decoding 0-height images in golang.org/x/image/tiffCVE-2023-29407Fix available6.5 Medium
- golang image, golang.org/x/image golang.org/x/image/tiff, fedoraproject fedora +2 moreExcessive resource consumption in golang.org/x/image/tiffCVE-2023-29408Fix available6.5 Medium
- fedoraproject fedora, linux kernal, procps project procps +3 more +5 moreUnder some circumstances, this weakness allows a user who has access to run the “ps” utility on a...CVE-2023-4016Fix available2.5 Low
- artifex ghostscript, debian linux, fedoraproject fedora +5 more +7 moreGhostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dosCVE-2023-38559Fix available5.5 Medium
- Show moreLoading…