F
Vendor security profile
fedora
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs447
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
447toplam CVE
Uncertain447 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
447Unknown
Latest vulnerabilities
4.7
CVE-2026-104045Sssd: sssd: denial of service via race condition in autofs responder
Patch status unknownEPSS %0
6.2
CVE-2026-104046Sssd: sssd: denial of service via incomplete identity provider authentication requests
Patch status unknownEPSS %0
6.8
CVE-2026-104048Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
Patch status unknownEPSS %0
5.3
CVE-2026-104047Sssd: sssd: information disclosure via query injection in entra id lookups
Patch status unknownEPSS %0
8.8
3.1
CVE-2026-103680Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation
Patch status unknownEPSS %0
6.5
CVE-2026-103679Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction
Patch status unknownEPSS %0
5.4
CVE-2026-103678Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value
Patch status unknownEPSS %0
6.5
CVE-2026-102588Moodle: csrf in xml grade import
Patch verifiedEPSS %0