Uutils / Coreutils
45 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-93658 | uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid | HIGH | 7.3 | Sep 18, 2026 |
| CVE-2026-35381 | uutils coreutils cut Local Logic Error and Data Integrity Issue in Output Filtering | LOW | 3.3 | Apr 22, 2026 |
| CVE-2026-35380 | uutils coreutils cut Local Logic Error and Data Integrity Issue in Delimiter Parsing | MEDIUM | 5.5 | Apr 22, 2026 |
| CVE-2026-35379 | uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling | LOW | 3.3 | Apr 22, 2026 |
| CVE-2026-35378 | uutils coreutils expr Local Denial of Service via Eager Evaluation of Parenthesized Subexpressions | LOW | 3.3 | Apr 22, 2026 |
| CVE-2026-35377 | uutils coreutils env Local Denial of Service via Improper Handling of Backslashes in Split-String Mode | LOW | 3.3 | Apr 22, 2026 |
| CVE-2026-35376 | uutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race Condition | MEDIUM | 5.8 | Apr 22, 2026 |
| CVE-2026-35375 | uutils coreutils split Local Data Integrity Issue via Lossy Filename Encoding | LOW | 3.3 | Apr 22, 2026 |
| CVE-2026-35374 | uutils coreutils split Arbitrary File Truncation via Time-of-Check to Time-of-Use (TOCTOU) Race Condition | MEDIUM | 6.3 | Apr 22, 2026 |
| CVE-2026-35373 | uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 Filenames | MEDIUM | 5.5 | Apr 22, 2026 |
| CVE-2026-35372 | uutils coreutils ln Security Bypass via Improper Handling of the --no-dereference Flag | MEDIUM | 5.0 | Apr 22, 2026 |
| CVE-2026-35371 | uutils coreutils id Misleading Identity Reporting in Pretty Print Mode | LOW | 3.3 | Apr 22, 2026 |
| CVE-2026-35370 | uutils coreutils id Incorrect Access-Control Decisions via Misrepresented Group Membership | MEDIUM | 4.4 | Apr 22, 2026 |
| CVE-2026-35369 | uutils coreutils kill System-wide Process Termination and Denial of Service via Argument Misinterpretation | MEDIUM | 5.5 | Apr 22, 2026 |
| CVE-2026-35368 | uutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) Injection | HIGH | 7.8 | Apr 22, 2026 |
| CVE-2026-35367 | uutils coreutils nohup Information Disclosure via Insecure Default Output Permissions | LOW | 3.3 | Apr 22, 2026 |
| CVE-2026-35366 | uutils coreutils printenv Security Inspection Bypass via UTF-8 Enforcement | MEDIUM | 4.4 | Apr 22, 2026 |
| CVE-2026-35365 | uutils coreutils mv Denial of Service and Data Duplication via Improper Symlink Expansion | MEDIUM | 6.6 | Apr 22, 2026 |
| CVE-2026-35364 | uutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race Condition | MEDIUM | 6.3 | Apr 22, 2026 |
| CVE-2026-35363 | uutils coreutils rm Safeguard Bypass via Improper Path Normalization | MEDIUM | 5.6 | Apr 22, 2026 |
| CVE-2026-35362 | uutils coreutils Missing TOCTOU Protection on Non-Linux Unix Platforms in Safe Traversal Module | LOW | 3.6 | Apr 22, 2026 |
| CVE-2026-35361 | uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems | MEDIUM | 4.4 | Apr 22, 2026 |
| CVE-2026-35360 | uutils coreutils touch Arbitrary File Truncation via TOCTOU Race Condition | MEDIUM | 6.3 | Apr 22, 2026 |
| CVE-2026-35359 | uutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink Swap | MEDIUM | 4.7 | Apr 22, 2026 |
| CVE-2026-35358 | uutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream Reading | MEDIUM | 5.5 | Apr 22, 2026 |
Showing 1 to 25 of 45 CVEs