Sudo
60 CVEs tracked. 2 of them are in CISA KEV.
This hub aggregates every CVE we track for Sudo, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
Sudo CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 2 |
| 2025-06 | 2 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 1 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 1 |
| 2026-09 | 0 |
Severity
How the 60 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High28
- Medium21
- Low10
Latest CVEs
The 15 most recently published vulnerabilities affecting Sudo.
- CVE-2026-82474Sudo through 1.9.17p2 Intercept Policy Bypass via execveat7.8
- CVE-2026-35535In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.7.4
- CVE-2025-32462Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.2.8
- CVE-2025-32463Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.9.3
- CVE-2025-46718sudo-rs Allows Low Privilege Users to Enumerate Privileges of Others3.3
- CVE-2025-46717sudo-rs Allows Low Privilege Users to Discover the Existence of Files in Inaccessible Folders3.3
- CVE-2023-7090Sudo: improper handling of ipa_hostname leads to privilege mismanagement6.6
- CVE-2023-42465Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equalin...7.0
- CVE-2023-42456sudo-rs Session File Relative Path Traversal vulnerability3.3
- CVE-2023-28487Sudo before 1.9.13 does not escape control characters in sudoreplay output.5.3
- CVE-2023-28486Sudo before 1.9.13 does not escape control characters in log messages.5.3
- CVE-2023-27320Sudo before 1.9.13p2 has a double free in the per-command chroot feature.7.2
- CVE-2023-22809In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to a...7.8
- CVE-2022-43995Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be trigge...7.1
- CVE-2021-3156Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends w...7.8
Product grouping is registry-driven, with AI assist and human review. How it works