Browse CVEs

MEDIUM 5.5 CVE-2026-35380 A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the literal two-byte string '' (two single quotes) a… Coreutils 0.8.0+ Fix from $1,6002026-04-22 MEDIUM 6.3 CVE-2026-35374 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the split utility of uutils coreutils. The program attempts to prevent data loss by c… Coreutils Patch available Fix from $1,6002026-04-22 MEDIUM 5.8 CVE-2026-35376 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the chcon utility of uutils coreutils during recursive operations. The implementation… Coreutils 0.8.0+ Fix from $1,6002026-04-22 MEDIUM 5.5 CVE-2026-35373 A logic error in the ln utility of uutils coreutils causes the program to reject source paths containing non-UTF-8 filename bytes when using target-d… Coreutils Patch available Fix from $1,6002026-04-22 MEDIUM 5.0 CVE-2026-35372 A logic error in the ln utility of uutils coreutils allows the utility to dereference a symbolic link target even when the --no-dereference (or -n) f… Coreutils 0.8.0+ Fix from $1,6002026-04-22 HIGH 7.8 CVE-2026-35368 A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility resolves the user specification via ge… Coreutils No fix yet Fix from $1,9502026-04-22 MEDIUM 5.5 CVE-2026-35369 An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request to send the default signal (SIGTERM) to… Coreutils 0.6.0+ Fix from $1,6002026-04-22 MEDIUM 6.6 CVE-2026-35365 The mv utility in uutils coreutils improperly handles directory trees containing symbolic links during moves across filesystem boundaries. Instead of… Coreutils 0.7.0+ Fix from $1,6002026-04-22 MEDIUM 6.3 CVE-2026-35364 A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mv utility of uutils coreutils during cross-device operations. The utility remov… Coreutils No fix yet Fix from $1,6002026-04-22 MEDIUM 5.6 CVE-2026-35363 A vulnerability in the rm utility of uutils coreutils allows the bypass of safeguard mechanisms intended to protect the current directory. While the … Coreutils No fix yet Fix from $1,6002026-04-22 MEDIUM 6.3 CVE-2026-35356 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the install utility of uutils coreutils when using the -D flag. The command creates p… Coreutils 0.7.0+ Fix from $1,6002026-04-22 MEDIUM 6.3 CVE-2026-35360 The touch utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition during file creation. When the utility … Coreutils No fix yet Fix from $1,6002026-04-22 MEDIUM 5.5 CVE-2026-35358 The cp utility in uutils coreutils, when performing recursive copies (-R), incorrectly treats character and block device nodes as stream sources rath… Coreutils 0.7.0+ Fix from $1,6002026-04-22 HIGH 7.7 CVE-2026-35349 A vulnerability in the rm utility of uutils coreutils allows a bypass of the --preserve-root protection. The implementation uses a path-string check … Coreutils 0.7.0+ Fix from $1,9502026-04-22 HIGH 7.0 CVE-2026-35352 A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils. The utility creates a FIFO and then performs… Coreutils No fix yet Fix from $1,9502026-04-22 MEDIUM 6.6 CVE-2026-35350 The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p (prese… Coreutils No fix yet Fix from $1,6002026-04-22 MEDIUM 6.3 CVE-2026-35355 The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition during file installation. The impleme… Coreutils 0.6.0+ Fix from $1,6002026-04-22 MEDIUM 5.5 CVE-2026-35348 The sort utility in uutils coreutils is vulnerable to a process panic when using the --files0-from option with inputs containing non-UTF-8 filenames.… Coreutils No fix yet Fix from $1,6002026-04-22 HIGH 7.1 CVE-2026-35341 A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. When mkfifo fails to create a F… Coreutils No fix yet Fix from $1,9502026-04-22 MEDIUM 5.3 CVE-2026-35345 A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. U… Coreutils No fix yet Fix from $1,6002026-04-22 HIGH 7.3 CVE-2026-35338 A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validat… Coreutils 0.6.0+ Fix from $1,9502026-04-22 MEDIUM 5.5 CVE-2026-35339 The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple files. The final return valu… Coreutils 0.6.0+ Fix from $1,6002026-04-22 MEDIUM 5.5 CVE-2026-35340 A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operation… Coreutils 0.6.0+ Fix from $1,6002026-04-22