Fedora Project
Security Risk Profile
55
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 66 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 5, 2003 to present
66
Total CVEs
0
Critical+High
5
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
5.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
55/100
medium
⚠️ 5 Active Exploits⚡ 2 Zero-Days
Severity Distribution
Critical
0High
0Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Input Validation
1
Most Affected Products
1. Fedora Project Fedora62
2. Linux Kernel3
3. Canonical Ubuntu3
4. Red Hat Red Hat Enterprise Linux3
5. openSUSE openSUSE Tumbleweed2
Recent Vulnerabilities
See more →bleepingcomputer-20260518071833
unknown
Exploit available for new DirtyDecrypt Linux root escalation flaw
5/18/2026⚠ Exploited🔧 No Patch
https://www.zdnet.com/article/dirty-frag-new-linux-bug-system-at-risk-no-easy-fix/
unknown
Dirty Frag is a new Linux bug putting your system at risk - and there's no easy fix yet
5/11/2026⚠ Exploited🔧 No Patch
zdnet-faf770d3-e36c-4678-89cf-a7435a8f1499
unknown
Dirty Frag is a new Linux bug putting your system at risk - and there's no easy fix yet
5/11/2026⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/new-linux-dirty-frag-zero-day-with-poc-exploit-gives-root-privileges/
unknown
New Linux 'Dirty Frag' zero-day gives root on all major distros
5/8/2026⚠ Exploited⚡ Zero-Day🔧 No Patch
bleepingcomputer-20260508074524
unknown
New Linux 'Dirty Frag' zero-day gives root on all major distros
5/8/2026⚠ Exploited⚡ Zero-Day🔧 No Patch
EOL-fedora-44
unknown
4/28/2026
https://seclists.org/oss-sec/2026/q1/7
unknown
Systemd vsock sshd
1/3/2026🔧 No Patch
EOL-fedora-43
unknown
10/28/2025
EOL-fedora-42
unknown
4/15/2025
EOL-fedora-41
unknown
10/29/2024
Monitor Fedora Project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.