← Back

Fedora

fedora

Vendor: Fedoraproject • 5,361 CVEs

CVEs (5,361)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Debian
FedoraprojectLinux+1 more
4Debian Linux
Enterprise LinuxFedora+1 more
Jun 17, 2026
Jun 2, 2022
N/A· v4
6.8 MEDIUM· v3
6.9 MEDIUM· v2
With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference.
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
May 31, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
3Apple
FedoraprojectVim
3Fedora
MacosVim
Jun 17, 2026
May 29, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
May 27, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
May 27, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Use After Free in GitHub repository vim/vim prior to 8.2.
4Apple
DebianFedoraproject+1 more
6Cups
CupsDebian Linux+3 more
Jun 17, 2026
May 26, 2022
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
2Apple
Fedoraproject
3Fedora
Mac Os XMacos
Jun 17, 2026
May 26, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive us...Show more
A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information.Show less
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite.
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite.
2Fedoraproject
Vim
2Fedora
Vim
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
2Fedoraproject
Logrotate Project
2Fedora
Logrotate
Jun 17, 2026
May 25, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state fil...Show more
A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.Show less
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
May 25, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
2Fedoraproject
Halibut Project
2Fedora
Halibut
Jun 17, 2026
May 24, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A use after free in info_width_internal in bk_info.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted text document.
2Fedoraproject
Halibut Project
2Fedora
Halibut
Jun 17, 2026
May 24, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified impact via a crafted text document.
2Fedoraproject
Halibut Project
2Fedora
Halibut
Jun 17, 2026
May 24, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A use after free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have other unspecified impact via a crafted text document.