Uutils Coreutils vulnerabilities

• uutils coreutils uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid CVE-2026-93658 Fix available 7.3 HighSeptember 18, 2026
• gnu coreutils Heap-based Buffer Overflow in GNU coreutils CVE-2026-56392 Fix available 1.8 LowJuly 24, 2026
• gnu coreutils Out‑of‑bounds Read in GNU coreutils CVE-2026-56391 Fix available 4.6 MediumJuly 24, 2026
• uutils coreutils uutils coreutils cut Local Logic Error and Data Integrity Issue in Output Filtering CVE-2026-35381 Fix available 3.3 LowApril 22, 2026
• uutils coreutils uutils coreutils cut Local Logic Error and Data Integrity Issue in Delimiter Parsing CVE-2026-35380 Fix available 5.5 MediumApril 22, 2026
• uutils coreutils uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling CVE-2026-35379 Fix available 3.3 LowApril 22, 2026
• uutils coreutils uutils coreutils expr Local Denial of Service via Eager Evaluation of Parenthesized Subexpressions CVE-2026-35378 Fix available 3.3 LowApril 22, 2026
• uutils coreutils uutils coreutils env Local Denial of Service via Improper Handling of Backslashes in Split-String Mode CVE-2026-35377 Fix available 3.3 LowApril 22, 2026
• uutils coreutils uutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race Condition CVE-2026-35376 Fix available 4.5 MediumApril 22, 2026
• uutils coreutils uutils coreutils split Local Data Integrity Issue via Lossy Filename Encoding CVE-2026-35375 Fix available 3.3 LowApril 22, 2026
• uutils coreutils uutils coreutils split Arbitrary File Truncation via Time-of-Check to Time-of-Use (TOCTOU) Race Condition CVE-2026-35374 Fix available 6.3 MediumApril 22, 2026
• uutils coreutils uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 Filenames CVE-2026-35373 Fix available 3.3 LowApril 22, 2026
• uutils coreutils uutils coreutils ln Security Bypass via Improper Handling of the --no-dereference Flag CVE-2026-35372 Fix available 5.0 MediumApril 22, 2026
• uutils coreutils uutils coreutils id Misleading Identity Reporting in Pretty Print Mode CVE-2026-35371 Fix available 3.3 LowApril 22, 2026
• uutils coreutils uutils coreutils id Incorrect Access-Control Decisions via Misrepresented Group Membership CVE-2026-35370 Fix available 4.4 MediumApril 22, 2026
• uutils coreutils uutils coreutils kill System-wide Process Termination and Denial of Service via Argument Misinterpretation CVE-2026-35369 Fix available 5.5 MediumApril 22, 2026
• uutils coreutils uutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) Injection CVE-2026-35368 Fix available 7.2 HighApril 22, 2026
• uutils coreutils uutils coreutils nohup Information Disclosure via Insecure Default Output Permissions CVE-2026-35367 Fix available 3.3 LowApril 22, 2026
• uutils coreutils uutils coreutils printenv Security Inspection Bypass via UTF-8 Enforcement CVE-2026-35366 Fix available 4.4 MediumApril 22, 2026
• uutils coreutils uutils coreutils mv Denial of Service and Data Duplication via Improper Symlink Expansion CVE-2026-35365 Fix available 6.6 MediumApril 22, 2026
• uutils coreutils uutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race Condition CVE-2026-35364 Fix available 6.3 MediumApril 22, 2026
• uutils coreutils uutils coreutils rm Safeguard Bypass via Improper Path Normalization CVE-2026-35363 Fix available 5.6 MediumApril 22, 2026
• uutils coreutils uutils coreutils Missing TOCTOU Protection on Non-Linux Unix Platforms in Safe Traversal Module CVE-2026-35362 Fix available 3.6 LowApril 22, 2026
• uutils coreutils uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems CVE-2026-35361 Fix available 3.4 LowApril 22, 2026
• uutils coreutils uutils coreutils touch Arbitrary File Truncation via TOCTOU Race Condition CVE-2026-35360 Fix available 6.3 MediumApril 22, 2026
• uutils coreutils uutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink Swap CVE-2026-35359 Fix available 4.7 MediumApril 22, 2026
• uutils coreutils uutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream Reading CVE-2026-35358 Fix available 4.4 MediumApril 22, 2026
• uutils coreutils uutils coreutils cp Information Disclosure via Permission Handling Race CVE-2026-35357 Fix available 4.7 MediumApril 22, 2026
• uutils coreutils uutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink Race CVE-2026-35356 Fix available 6.3 MediumApril 22, 2026
• uutils coreutils uutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU Race CVE-2026-35355 Fix available 6.3 MediumApril 22, 2026
• uutils coreutils uutils coreutils mv Security Xattr TOCTOU Race in Cross-Device CVE-2026-35354 Fix available 4.7 MediumApril 22, 2026
• uutils coreutils uutils coreutils mkdir Permission Exposure Race Condition with -m CVE-2026-35353 Fix available 3.3 LowApril 22, 2026
• uutils coreutils uutils coreutils mkfifo Privilege Escalation via TOCTOU Race Condition CVE-2026-35352 Fix available 7.0 HighApril 22, 2026
• uutils coreutils uutils coreutils mv Silent Ownership Loss in Cross-Device Operations CVE-2026-35351 Fix available 4.2 MediumApril 22, 2026
• uutils coreutils uutils coreutils cp Unexpected Privileged Executable Creation with -p CVE-2026-35350 Fix available 6.6 MediumApril 22, 2026
• uutils coreutils uutils coreutils Path-Based Safety Bypass with --preserve-root CVE-2026-35349 Fix available 6.7 MediumApril 22, 2026
• uutils coreutils uutils coreutils sort Local Denial of Service via Forced UTF-8 Parsing CVE-2026-35348 Fix available 5.5 MediumApril 22, 2026
• uutils coreutils uutils coreutils comm Silent Data Loss or Denial of Service via Improper Input Validation CVE-2026-35347 Fix available 4.4 MediumApril 22, 2026
• uutils coreutils uutils coreutils comm Silent Data Corruption via Lossy UTF-8 Normalization CVE-2026-35346 Fix available 3.3 LowApril 22, 2026
• uutils coreutils uutils coreutils tail Privileged Information Disclosure via Symlink Replacement Race CVE-2026-35345 Fix available 5.3 MediumApril 22, 2026
• uutils coreutils uutils coreutils dd Silent Data Corruption via Unconditional Truncation Error Suppression CVE-2026-35344 Fix available 3.3 LowApril 22, 2026
• uutils coreutils uutils coreutils cut Inconsistent Output Suppression with Newline Delimiters CVE-2026-35343 Fix available 3.3 LowApril 22, 2026
• uutils coreutils uutils coreutils mktemp Insecure Temporary File Placement via Empty TMPDIR CVE-2026-35342 Fix available 3.3 LowApril 22, 2026
• uutils coreutils uutils coreutils mkfifo Unauthorized Permission Change on Existing Files CVE-2026-35341 Fix available 7.1 HighApril 22, 2026
• uutils coreutils uutils coreutils chown and chgrp False Success Exit Code in Recursive Mode CVE-2026-35340 Fix available 5.5 MediumApril 22, 2026
• uutils coreutils uutils coreutils chmod False Success Exit Code in Recursive Mode CVE-2026-35339 Fix available 5.5 MediumApril 22, 2026
• uutils coreutils uutils coreutils chmod Path Traversal Bypass of --preserve-root CVE-2026-35338 Fix available 7.3 HighApril 22, 2026