fedora
- Software type
- Operating system
- Total vulnerabilities (90 days)
- 0
Unreliable vulnerability data
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/24/2026, fedora recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of fedora and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-54231Abrt: unsanitized systemd journal content written to dump directory files enables content injectionCVE-2026-54230Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwritesCVE-2026-35094Libinput: libinput: information disclosure via dangling pointer in lua plugin handlingCVE-2026-35093Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode pluginsCVE-2023-4134Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-54231Abrt: unsanitized systemd journal content written to dump directory files enables content injection | Exploitation statusNot exploited | FixNo | Published06/13/2026 | SeverityMedium |
CVE-2026-54230Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites | Exploitation statusNot exploited | FixNo | Published06/13/2026 | SeverityHigh |
CVE-2026-35094Libinput: libinput: information disclosure via dangling pointer in lua plugin handling | Exploitation statusNot exploited | FixNo | Published04/01/2026 | SeverityLow |
CVE-2026-35093Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins | Exploitation statusNot exploited | FixNo | Published04/01/2026 | SeverityHigh |
CVE-2023-4134Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work() | Exploitation statusNot exploited | FixNo | Published11/14/2024 | SeverityMedium |
CVE-2024-3056Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack | Exploitation statusNot exploited | FixNo | Published08/02/2024 | SeverityHigh |
CVE-2024-6293CVE-2024-6293 | Exploitation statusNot exploited | FixYes | Published06/24/2024 | SeverityHigh |
CVE-2024-6292CVE-2024-6292 | Exploitation statusNot exploited | FixYes | Published06/24/2024 | SeverityHigh |
CVE-2024-6291CVE-2024-6291 | Exploitation statusNot exploited | FixYes | Published06/24/2024 | SeverityHigh |
CVE-2024-6290CVE-2024-6290 | Exploitation statusNot exploited | FixYes | Published06/24/2024 | SeverityHigh |
5,368 Results | Page 1 of 537