What’s Vulnerable › Products
Uutils coreutils vulnerabilities
45 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 45 published in the last 12 months.
Check whether your Uutils coreutils version is affected
Latest Uutils coreutils vulnerabilities
- CVE-2026-93658 — uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid (CVSS 7.0)
- CVE-2026-35381 — uutils coreutils cut Local Logic Error and Data Integrity Issue in Output Filtering (CVSS 3.3)
- CVE-2026-35380 — uutils coreutils cut Local Logic Error and Data Integrity Issue in Delimiter Parsing (CVSS 5.5)
- CVE-2026-35379 — uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling (CVSS 3.3)
- CVE-2026-35378 — uutils coreutils expr Local Denial of Service via Eager Evaluation of Parenthesized Subexpressions (CVSS 3.3)
- CVE-2026-35377 — uutils coreutils env Local Denial of Service via Improper Handling of Backslashes in Split-String Mode (CVSS 3.3)
- CVE-2026-35376 — uutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race Condition (CVSS 5.8)
- CVE-2026-35375 — uutils coreutils split Local Data Integrity Issue via Lossy Filename Encoding (CVSS 3.3)
- CVE-2026-35374 — uutils coreutils split Arbitrary File Truncation via Time-of-Check to Time-of-Use (TOCTOU) Race Condition (CVSS 6.3)
- CVE-2026-35373 — uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 Filenames (CVSS 5.5)
- CVE-2026-35372 — uutils coreutils ln Security Bypass via Improper Handling of the --no-dereference Flag (CVSS 5.0)
- CVE-2026-35371 — uutils coreutils id Misleading Identity Reporting in Pretty Print Mode (CVSS 3.3)
- CVE-2026-35370 — uutils coreutils id Incorrect Access-Control Decisions via Misrepresented Group Membership (CVSS 4.4)
- CVE-2026-35369 — uutils coreutils kill System-wide Process Termination and Denial of Service via Argument Misinterpretation (CVSS 5.5)
- CVE-2026-35368 — uutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) Injection (CVSS 7.8)
- CVE-2026-35367 — uutils coreutils nohup Information Disclosure via Insecure Default Output Permissions (CVSS 3.3)
- CVE-2026-35366 — uutils coreutils printenv Security Inspection Bypass via UTF-8 Enforcement (CVSS 4.4)
- CVE-2026-35365 — uutils coreutils mv Denial of Service and Data Duplication via Improper Symlink Expansion (CVSS 6.6)
- CVE-2026-35364 — uutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race Condition (CVSS 6.3)
- CVE-2026-35363 — uutils coreutils rm Safeguard Bypass via Improper Path Normalization (CVSS 5.6)
- CVE-2026-35362 — uutils coreutils Missing TOCTOU Protection on Non-Linux Unix Platforms in Safe Traversal Module (CVSS 3.6)
- CVE-2026-35361 — uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems (CVSS 4.4)
- CVE-2026-35360 — uutils coreutils touch Arbitrary File Truncation via TOCTOU Race Condition (CVSS 6.3)
- CVE-2026-35359 — uutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink Swap (CVSS 4.7)
- CVE-2026-35358 — uutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream Reading (CVSS 5.5)