Fedora vulnerabilitiesAnd the versions its exploited flaws hit.
Fedora is made by Fedoraproject. We track 5,323 published vulnerabilities listed under that exact name, across 36 versions. 84 of them are on the list of flaws known to be exploited, the newest added on 26 August 2026. Fedoraproject lists newer releases under their own names, such as Fedora Core, so check those pages too.
The most recent Fedora flaw added to the known-exploited list is CVE-2022-0995, on 26 August 2026. We keep watching the known-exploited list.
Is Fedora listed under other names? Yes.
Fedoraproject also lists Fedora under more specific names, such as Fedora Core and Fedora Linux Kernel. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
Which versions of Fedora do the exploited flaws hit?
Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.
- CVE-2022-0995Exploited list, 26 Aug 2026
Linux Kernel Out-of-Bounds Write Vulnerability
35 - CVE-2022-0492Exploited list, 2 Jun 2026
Linux Kernel Improper Authentication Vulnerability
35 - CVE-2021-30952Exploited list, 5 Mar 2026
Apple Multiple Products Integer Overflow or Wraparound Vulnerability
3435 - CVE-2019-5418Exploited list, 7 Jul 2025
Rails Ruby on Rails Path Traversal Vulnerability
30 - CVE-2020-11023Exploited list, 23 Jan 2025
JQuery Cross-Site Scripting (XSS) Vulnerability
313233 - CVE-2020-13965Exploited list, 26 Jun 2024
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
3132 - CVE-2024-4577Exploited list, 12 Jun 2024
PHP-CGI OS Command Injection Vulnerability
3940 - CVE-2024-1086Exploited list, 30 May 2024
Linux Kernel Use-After-Free Vulnerability
39 - CVE-2024-5274Exploited list, 28 May 2024
Google Chromium V8 Type Confusion Vulnerability
3940 - CVE-2024-4947Exploited list, 20 May 2024
Google Chromium V8 Type Confusion Vulnerability
383940 - CVE-2024-4761Exploited list, 16 May 2024
Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
383940 - CVE-2024-4671Exploited list, 13 May 2024
Google Chromium Visuals Use-After-Free Vulnerability
383940 - CVE-2023-4762Exploited list, 6 Feb 2024
Google Chromium V8 Type Confusion Vulnerability
373839 - CVE-2024-0519Exploited list, 17 Jan 2024
Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
3839 - CVE-2023-7101Exploited list, 2 Jan 2024
Spreadsheet::ParseExcel Remote Code Execution Vulnerability
3839 - CVE-2023-7024Exploited list, 2 Jan 2024
Google Chromium WebRTC Heap Buffer Overflow Vulnerability
3839 - CVE-2023-42917Exploited list, 4 Dec 2023
Apple Multiple Products WebKit Memory Corruption Vulnerability
3839 - CVE-2023-42916Exploited list, 4 Dec 2023
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
3839 - CVE-2023-6345Exploited list, 30 Nov 2023
Google Skia Integer Overflow Vulnerability
373839 - CVE-2023-4911Exploited list, 21 Nov 2023
GNU C Library Buffer Overflow Vulnerability
373839 - CVE-2023-5631Exploited list, 26 Oct 2023
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
39 - CVE-2023-44487Exploited list, 10 Oct 2023
HTTP/2 Rapid Reset Attack Vulnerability
3738 - CVE-2023-5217Exploited list, 2 Oct 2023
Google Chromium libvpx Heap Buffer Overflow Vulnerability
373839 - CVE-2023-41993Exploited list, 25 Sep 2023
Apple Multiple Products WebKit Code Execution Vulnerability
373839 - CVE-2023-4863Exploited list, 13 Sep 2023
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
373839 - CVE-2023-38180Exploited list, 9 Aug 2023
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
3738 - CVE-2023-20867Exploited list, 23 Jun 2023
VMware Tools Authentication Bypass Vulnerability
373839 - CVE-2020-35730Exploited list, 22 Jun 2023
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
3233 - CVE-2021-44026Exploited list, 22 Jun 2023
Roundcube Webmail SQL Injection Vulnerability
3334 - CVE-2023-3079Exploited list, 7 Jun 2023
Google Chromium V8 Type Confusion Vulnerability
3738
Showing the 30 most recently added of 84 exploited flaws. The full list is below.
Which Fedora vulnerabilities are being exploited?
50 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.8Linux Kernel Out-of-Bounds Write Vulnerability
Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.
- 7.8Linux Kernel Improper Authentication Vulnerability
Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.
- 7.8Apple Multiple Products Integer Overflow or Wraparound Vulnerability
Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.
- 7.5Rails Ruby on Rails Path Traversal Vulnerability
Rails Ruby on Rails contains a path traversal vulnerability in Action View.
- 6.9JQuery Cross-Site Scripting (XSS) Vulnerability
JQuery contains a persistent cross-site scripting (XSS) vulnerability.
- 6.1Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.
- 9.8PHP-CGI OS Command Injection Vulnerability
PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution.
- 7.8Linux Kernel Use-After-Free Vulnerability
Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.
Which Fedora flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle...
- >99%
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via...
- >99%
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote...
- >99%CVE-2014-0195Medium
The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows...
- 98%CVE-2018-1111High
DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client.
- 97%CVE-2016-9299Critical
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.
- 95%CVE-2014-0224High
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master...
- 88%CVE-2014-0221Medium
The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a...
- 88%CVE-2017-11610High
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to...
Running Fedora? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.
- Matched to
- Fedora on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 5,323 published vulnerabilities listed under the name Fedora, across 36 versions. The most recent Fedora flaw added to the known-exploited list is CVE-2022-0995, on 26 August 2026.
84 are on the list of flaws known to be exploited. The most recently added are CVE-2022-0995, CVE-2022-0492 and CVE-2021-30952.
Fedoraproject also lists Fedora under more specific names, such as Fedora Core and Fedora Linux Kernel. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Each flaw names its own versions, usually as ranges. The newest, CVE-2022-0995, affects 35. The versions for every exploited flaw are listed on this page.
Create a EdgeProtect account and track Fedora. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.