F
Vendor security profile10 actively exploited CVEs
fedora
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs247
Critical20
CISA KEV10
Public exploit127
Patch rate%83
Avg. CVSS7.1
12-month vulnerability rate
0
0
0
0
0
1
0
3
1
0
14
5
CVE KEV
CVE severity distribution
247toplam CVE
Critical20 (8%)
High141 (57%)
Medium80 (32%)
Low6 (2%)
Patch and exploitation view
%83
Verified patch
%4
CISA KEV
%51
Public exploit
204Patch available
0Partial
2Workaround
0Vendor: no patch
41Unknown
Latest vulnerabilities
6.8
CVE-2026-104048
Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
RH
Patch status unknownEPSS %0
5.3
CVE-2026-104047
Sssd: sssd: information disclosure via query injection in entra id lookups
RH
Patch status unknownEPSS %0
8.8
CVE-2026-94422
xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
R
Patch verifiedEPSS %1
3.1
CVE-2026-103680
Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation
F
Patch status unknownEPSS %0
6.5
CVE-2026-103679
Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction
F
Patch status unknownEPSS %0
5.4
CVE-2026-103678
Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value
F
Patch status unknownEPSS %0
7.7
CVE-2026-103431
Collectl: collectl: colmux does not sanitize ansi/vt100 terminal escape sequences in data received from remote collectl instances
F
Patch status unknownEPSS %0
6.5
CVE-2026-102588
Moodle: csrf in xml grade import
F
Patch verifiedEPSS %0
2.7
CVE-2026-102587
Moodle: user list filters bypass profile field visibility
F
Patch verifiedEPSS %0
4.3
CVE-2026-102586
Moodle: xss via password reset link due to insufficient username escaping
F
Patch verifiedEPSS %0