F
Vendor security profile10 actively exploited CVEs
fedora
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs307
Critical24
CISA KEV10
Public exploit155
Patch rate%83
Avg. CVSS7.1
12-month vulnerability rate
0
0
0
0
0
1
0
3
1
0
14
5
CVE KEV
CVE severity distribution
307toplam CVE
Critical24 (8%)
High174 (57%)
Medium101 (33%)
Low8 (3%)
Patch and exploitation view
%83
Verified patch
%3
CISA KEV
%50
Public exploit
255Patch available
0Partial
2Workaround
0Vendor: no patch
50Unknown
Latest vulnerabilities
4.7
CVE-2026-104045
Sssd: sssd: denial of service via race condition in autofs responder
RH
Patch status unknownEPSS %0
6.2
CVE-2026-104046
Sssd: sssd: denial of service via incomplete identity provider authentication requests
RH
Patch status unknownEPSS %0
6.8
CVE-2026-104048
Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
RH
Patch status unknownEPSS %0
5.3
CVE-2026-104047
Sssd: sssd: information disclosure via query injection in entra id lookups
RH
Patch status unknownEPSS %0
8.8
CVE-2026-94422
xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
R
Patch verifiedEPSS %1
3.1
CVE-2026-103680
Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation
F
Patch status unknownEPSS %0
6.5
CVE-2026-103679
Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction
F
Patch status unknownEPSS %0
5.4
CVE-2026-103678
Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value
F
Patch status unknownEPSS %0
7.7
CVE-2026-103431
Collectl: collectl: colmux does not sanitize ansi/vt100 terminal escape sequences in data received from remote collectl instances
F
Patch status unknownEPSS %0
6.5
CVE-2026-102588
Moodle: csrf in xml grade import
F
Patch verifiedEPSS %0