FE
Product
Fedora
by Fedoraproject · last CVE Jun 13, 2026
On CISA KEVExploited in the wildRansomware-linked
5,359
CVEs
87
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 439High 49Medium 11Low 1
Watch

Add Fedora to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-32662
9.8
1%
Apr 23
FreeRDP rdp_redirection_read_base64_wchar out of bound read
Affected: 38; 39; 40
CVE-2024-32659
9.8
1%
Apr 23
freerdp_image_copy out of bound read
Affected: 38; 39; 40
CVE-2024-32658
9.8
1%
Apr 23
FreeRDP ExtractRunLengthRegular* out of bound read
Affected: 38; 39; 40
CVE-2024-32460
9.8
2%
Apr 22
FreeRDP Out-Of-Bounds Read in interleaved_decompress
Affected: 38; 39; 40
CVE-2024-32459
9.8
4%
Apr 22
FreeRDP Out-Of-Bounds Read in ncrush_decompress
Affected: 38; 39; 40
CVE-2024-32458
9.8
2%
Apr 22
FreeRDP Out-Of-Bounds Read in planar_skip_plane_rle
Affected: 38; 39; 40
CVE-2024-32041
9.8
2%
Apr 22
FreeRDP OutOfBound Read in zgfx_decompress_segment
Affected: 38; 39; 40
CVE-2024-32040
9.8
2%
Apr 22
FreeRDP vulnerable to integer underflow in nsc_rle_decode
Affected: 38; 39; 40
CVE-2024-32039
9.8
2%
Apr 22
FreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data
Affected: 38; 39; 40
CVE-2024-31581
9.8
1%
Apr 17
FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c
Affected: 38; 39; 40
CVE-2024-3116
9.8
66%
Apr 4
Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4
Affected: 39
CVE-2024-3209
9.8
1%
Apr 2
UPX bele.h get_ne64 heap-based overflow
Affected: 38; 39; 40
CVE-2024-22097
9.8
2%
Feb 20
A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0
Affected: 40
CVE-2024-23305
9.8
2%
Feb 20
An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-23809
9.8
2%
Feb 20
A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-21795
9.8
2%
Feb 20
A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-21812
9.8
2%
Feb 20
An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-23313
9.8
2%
Feb 20
An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-23310
9.8
2%
Feb 20
A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-23606
9.8
2%
Feb 20
An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-1597
9.8
5%
Feb 19
pgjdbc SQL Injection via line comment generation
Affected: 40
CVE-2024-1283
9.8
22%
Feb 6
Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 38; 39
CVE-2024-1284
9.8
1%
Feb 6
Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 38; 39
CVE-2024-0808
9.8
1%
Jan 23
Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file
Affected: 38; 39
CVE-2023-6816
9.8
2%
Jan 18
Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer
Affected: 39
CVE-2023-6395
9.8
2%
Jan 16
Mock: privilege escalation for users that can access mock configuration
Affected: 38; 39
CVE-2023-6879
9.8
1%
Dec 27
heap buffer overflow in libaom
Affected: 38; 39
CVE-2023-46850
9.8
2%
Nov 11
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer
Affected: 39
CVE-2023-5550
9.8
2%
Nov 9
Moodle: rce due to lfi risk in some misconfigured shared hosting environments
Affected: 38
CVE-2023-3961
9.8
3%
Nov 3
Samba: smbd allows client access to unix domain sockets on the file system as root
Affected: 39
CVE-2023-39332
9.8
2%
Oct 18
Various `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects
Affected: 39
CVE-2023-38545
9.8
79%
Oct 18
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake
Affected: 37
CVE-2023-45239
9.8
2%
Oct 6
A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr,…
Affected: 39
CVE-2023-39361
9.8
89%
Sep 5
Unauthenticated SQL Injection in graph_view.php in Cacti
Affected: 37; 38
CVE-2023-36328
9.8
1%
Sep 1
Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a…
Affected: 37; 38; 39
CVE-2023-40567
9.8
2%
Aug 31
Out-Of-Bounds Write in FreeRDP
Affected: 37; 38; 39
CVE-2023-40569
9.8
1%
Aug 31
Out-Of-Bounds Write in FreeRDP
Affected: 37; 38; 39
CVE-2023-40186
9.8
1%
Aug 31
IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP
Affected: 37; 38; 39
CVE-2023-39352
9.8
2%
Aug 31
Invalid offset validation leading to Out Of Bound Write in FreeRDP
Affected: 37; 38; 39
CVE-2023-4322
9.8
1%
Aug 14
Heap-based Buffer Overflow in radareorg/radare2
Affected: 37; 38
CVE-2023-3824
9.8
22%
Aug 11
Buffer overflow and overread in phar_dir_read()
Affected: 38
CVE-2023-37920
9.8
1%
Jul 25
Certifi's removal of e-Tugra root certificate
Affected: 38
CVE-2023-38408
9.8
80%
Jul 20
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an…
Affected: 37; 38
CVE-2023-29405
9.8
2%
Jun 8
Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
Affected: 38
CVE-2023-29404
9.8
2%
Jun 8
Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
Affected: 38
CVE-2023-29402
9.8
2%
Jun 8
Code injection via go command with cgo in cmd/go
Affected: 38
CVE-2023-34152
9.8
8%
May 30
A vulnerability was found in ImageMagick
Affected: 37; 38
CVE-2023-31047
9.8
1%
May 7
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files
Affected: 38
CVE-2023-29141
9.8
1%
Mar 31
An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3
Affected: 37
CVE-2023-28333
9.8
1%
Mar 23
Moodle: pix helper potential mustache code injection risk
Affected: 36
Page 3 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)