F
Vendor security profile10 actively exploited CVEs
fedoraproject
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs237
Critical20
CISA KEV10
Public exploit131
Patch rate%80
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
0
0
2
0
3
0
3
2
2
CVE KEV
CVE severity distribution
237toplam CVE
Critical20 (8%)
High136 (57%)
Medium79 (33%)
Low2 (1%)
Patch and exploitation view
%80
Verified patch
%4
CISA KEV
%55
Public exploit
190Patch available
0Partial
2Workaround
0Vendor: no patch
45Unknown
Latest vulnerabilities
6.8
CVE-2026-104048
Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
RH
Patch status unknownEPSS %0
5.3
CVE-2026-104047
Sssd: sssd: information disclosure via query injection in entra id lookups
RH
Patch status unknownEPSS %0
5.4
CVE-2026-90462
Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
RH
Patch status unknownEPSS %0
4.0
CVE-2026-90996
Sssd: sssd: denial of service in nss responder via crafted zero-length requests
RH
Patch status unknownEPSS %0
5.5
CVE-2026-68743
Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1
RH
Patch status unknownEPSS %0
3.3
CVE-2026-68744
Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply
RH
Patch status unknownEPSS %0
5.5
CVE-2026-68742
Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
RH
Patch status unknownEPSS %0
6.4
CVE-2026-12610
Sssd: use-after-free crash in sssd' 'sssd_pam' process
RH
Patch status unknownEPSS %0
5.5
CVE-2026-54231
Abrt: unsanitized systemd journal content written to dump directory files enables content injection
RH
Patch status unknownEPSS %0
7.0
CVE-2026-54230
Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites
RH
Patch status unknownEPSS %0