Vulnerabilities in Uutils
45 resultsVexday analysis
Uutils apresenta 44 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando descobertas recentes e concentradas. Nenhuma está sob exploração ativa (KEV) ou classificada como crítica, mas a dominância de CWE-367 (Race Condition) sugere uma classe específica de falhas de concorrência que requer atenção em arquiteturas multi-thread. O risco é moderado, mas a concentração temporal das divulgações aponta para possível investigação sistemática do código-fonte.
CVE-2026-35368HIGHuutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) InjectionEPSS 0.1%CVE-2026-35361LOWuutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux SystemsEPSS 0.1%CVE-2026-35341HIGHuutils coreutils mkfifo Unauthorized Permission Change on Existing FilesEPSS 0.1%CVE-2026-35351MEDIUMuutils coreutils mv Silent Ownership Loss in Cross-Device OperationsEPSS 0.1%CVE-2026-93658HIGHuutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuidEPSS 0.1%CVE-2026-35371LOWuutils coreutils id Misleading Identity Reporting in Pretty Print ModeEPSS 0.1%CVE-2026-35373LOWuutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 FilenamesEPSS 0.1%CVE-2026-35348MEDIUMuutils coreutils sort Local Denial of Service via Forced UTF-8 ParsingEPSS 0.1%CVE-2026-35344LOWuutils coreutils dd Silent Data Corruption via Unconditional Truncation Error SuppressionEPSS 0.1%CVE-2026-35350MEDIUMuutils coreutils cp Unexpected Privileged Executable Creation with -pEPSS 0.1%CVE-2026-35367LOWuutils coreutils nohup Information Disclosure via Insecure Default Output PermissionsEPSS 0.1%CVE-2026-35370MEDIUMuutils coreutils id Incorrect Access-Control Decisions via Misrepresented Group MembershipEPSS 0.1%CVE-2026-35377LOWuutils coreutils env Local Denial of Service via Improper Handling of Backslashes in Split-String ModeEPSS 0.1%CVE-2026-35352HIGHuutils coreutils mkfifo Privilege Escalation via TOCTOU Race ConditionEPSS 0.1%CVE-2026-35353LOWuutils coreutils mkdir Permission Exposure Race Condition with -mEPSS 0.1%CVE-2026-35355MEDIUMuutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU RaceEPSS 0.1%CVE-2026-35356MEDIUMuutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink RaceEPSS 0.1%CVE-2026-35376MEDIUMuutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race ConditionEPSS 0.1%CVE-2026-35359MEDIUMuutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink SwapEPSS 0.1%CVE-2026-35360MEDIUMuutils coreutils touch Arbitrary File Truncation via TOCTOU Race ConditionEPSS 0.1%