CVE Tools
Track your stack

Fedoraproject

4,697 CVEs tracked since 2005. Since Sep 2018, 77 of them reached CISA KEV.

Fedoraproject CVEs per month

Sep 2018 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Fedoraproject CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2018-0970
2018-1080
2018-11no snapshot
2018-12290
2019-01no snapshot
2019-02590
2019-03no snapshot
2019-04no snapshot
2019-05260
2019-06no snapshot
2019-07601
2019-08400
2019-09451
2019-10671
2019-111090
2019-121111
2020-01451
2020-02722
2020-03460
2020-04no snapshot
2020-05no snapshot
2020-06821
2020-07no snapshot
2020-08421
2020-09950
2020-10550
2020-11825
2020-12581
2021-01722
2021-02821
2021-03no snapshot
2021-041247
2021-05920
2021-061092
2021-07631
2021-081233
2021-09591
2021-101008
2021-11793
2021-12902
2022-01771
2022-021330
2022-031112
2022-04580
2022-05710
2022-06520
2022-07911
2022-081131
2022-09983
2022-10540
2022-11690
2022-12200
2023-01190
2023-02130
2023-03no snapshot
2023-04542
2023-05450
2023-06332
2023-07480
2023-08821
2023-09684
2023-10573
2023-11623
2023-12272
2024-01562
2024-02690
2024-03410
2024-04770
2024-05864
2024-06301
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-1011 or fewer
2026-113 or fewer

Products

The products that kept showing up in Fedoraproject's monthly top three, with their CVEs summed over those months.

  1. Fedora3,93160 months
  2. Extra Packages For Enterprise Linux7428 months
  3. 389 Directory Server74 months
  4. Sssd55 months
  5. Fedora Linux Kernel11 month
  6. Sectool11 month
  7. Selinux-policy11 month
  8. Supybot-fedora11 month
  9. Unbound11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Fedoraproject.

  1. CVE-2026-104045Sssd: sssd: denial of service via race condition in autofs responder4.7
  2. CVE-2026-104046Sssd: sssd: denial of service via incomplete identity provider authentication requests6.2
  3. CVE-2026-104048Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation6.8
  4. CVE-2026-104047Sssd: sssd: information disclosure via query injection in entra id lookups5.3
  5. CVE-2026-88252Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion4.7
  6. CVE-2026-104039Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder4.7
  7. CVE-2026-104032Sssd: sssd: denial of service via unprivileged autofs cache invalidation5.5
  8. CVE-2026-104031Sssd: sssd: denial of service via memory exhaustion in autofs responder5.5
  9. CVE-2026-104029Sssd: sssd: denial of service via out-of-bounds read in autofs responder3.3
  10. CVE-2026-104030Sssd: sssd: denial of service via out-of-bounds read during passkey parsing5.5
  11. CVE-2026-90462Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization5.4
  12. CVE-2026-90996Sssd: sssd: denial of service in nss responder via crafted zero-length requests4.0
  13. CVE-2026-90995Sssd: sssd: local denial of service due to null pointer dereference in pam responder5.5
  14. CVE-2026-68743Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v15.5
  15. CVE-2026-68744Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply3.3

The record

Peak rank
#3 in Feb 2022
Busiest month shown
Feb 2022, 133 CVEs
Months with a KEV entry
35 since Sep 2018
Monthly snapshots
178 since 2005
Fedoraproject's full record, month by month