Fedoraproject Fedora vulnerabilities
5,287 known vulnerabilities affecting fedoraproject/fedora.
Total CVEs
5,287
CISA KEV
88
actively exploited
Public exploits
173
Exploited in wild
143
Severity breakdown
CRITICAL516HIGH2329MEDIUM2269LOW173
Vulnerabilities
Page 80 of 265
CVE-2021-30514P3HIGHCVSS 8.8v33v342021-06-04
CVE-2021-30514 [HIGH] CWE-416 CVE-2021-30514: Use after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had
Use after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
nvd
CVE-2022-2011P3HIGHCVSS 8.8v372022-07-28
CVE-2022-2011 [HIGH] CWE-416 CVE-2022-2011: Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potent
Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
nvd
CVE-2021-30523P3HIGHCVSS 8.8v33v342021-06-07
CVE-2021-30523 [HIGH] CWE-416 CVE-2021-30523: Use after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potenti
Use after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.
nvd
CVE-2021-30545P3HIGHCVSS 8.8v33v342021-06-15
CVE-2021-30545 [HIGH] CWE-416 CVE-2021-30545: Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who h
Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
nvd
CVE-2022-3040P3HIGHCVSS 8.8v372022-09-26
CVE-2022-3040 [HIGH] CWE-787 CVE-2022-3040: Use after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potent
Use after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
nvd
CVE-2022-3041P3HIGHCVSS 8.8v372022-09-26
CVE-2022-3041 [HIGH] CWE-416 CVE-2022-3041: Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potent
Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
nvd
CVE-2023-25358P3HIGHCVSS 8.8v382023-03-02
CVE-2023-25358 [HIGH] CWE-416 CVE-2023-25358: A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows a
A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.
nvd
CVE-2022-2007P3HIGHCVSS 8.8v372022-07-28
CVE-2022-2007 [HIGH] CWE-416 CVE-2022-2007: Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to poten
Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
nvd
CVE-2022-2161P3HIGHCVSS 8.8v35v362022-07-28
CVE-2022-2161 [HIGH] CWE-416 CVE-2022-2161: Use after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote attacker
Use after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who convinced the user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.
nvd
CVE-2023-1820P3HIGHCVSS 8.8v36v372023-04-04
CVE-2023-1820 [HIGH] CWE-787 CVE-2023-1820: Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote att
Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2022-3052P3HIGHCVSS 8.8v372022-09-26
CVE-2022-3052 [HIGH] CWE-787 CVE-2022-3052: Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52
Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions.
nvd
CVE-2022-3039P3HIGHCVSS 8.8v372022-09-26
CVE-2022-3039 [HIGH] CWE-416 CVE-2022-3039: Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potent
Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
nvd
CVE-2022-2858P3HIGHCVSS 8.8v372022-09-26
CVE-2022-2858 [HIGH] CWE-416 CVE-2022-2858: Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to
Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction.
nvd
CVE-2022-2624P3HIGHCVSS 8.8v372022-08-12
CVE-2022-2624 [HIGH] CWE-787 CVE-2022-2624: Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who co
Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file.
nvd
CVE-2022-2855P3HIGHCVSS 8.8v372022-09-26
CVE-2022-2855 [HIGH] CWE-416 CVE-2022-2855: Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potent
Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
nvd
CVE-2021-37959P3HIGHCVSS 8.8v33v352021-10-08
CVE-2021-37959 [HIGH] CWE-416 CVE-2021-37959: Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convin
Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a user to enage in a series of user gestures to potentially exploit heap corruption via a crafted HTML page.
nvd
CVE-2021-38007P3HIGHCVSS 8.8v342021-12-23
CVE-2021-38007 [HIGH] CWE-843 CVE-2021-38007: Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially
Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
nvd
CVE-2021-38012P3HIGHCVSS 8.8v342021-12-23
CVE-2021-38012 [HIGH] CWE-843 CVE-2021-38012: Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially
Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
nvd
CVE-2022-0107P3HIGHCVSS 8.8v34v35+1 more2022-02-12
CVE-2022-0107 [HIGH] CWE-416 CVE-2022-0107: Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an at
Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
nvd
CVE-2022-0098P3HIGHCVSS 8.8v34v35+1 more2022-02-12
CVE-2022-0098 [HIGH] CWE-416 CVE-2022-0098: Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an atta
Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures.
nvd