Known Vulnerabilities for Sudo by Sudo Project
Listed below are 10 of the newest known vulnerabilities associated with "Sudo" by "Sudo Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-35535 json | In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before run... | Not Provided | 2026-04-03 | 2026-04-03 |
| CVE-2026-34397 json | Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 an... | Not Provided | 2026-04-01 | 2026-04-04 |
| CVE-2026-33765 json | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application... | Not Provided | 2026-03-27 | 2026-04-02 |
| CVE-2026-31457 json | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr in repeat_call_fn da... | Not Provided | 2026-04-22 | 2026-04-22 |
| CVE-2023-42465 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7 - HIGH | 2023-12-22 | 2024-01-28 |
| CVE-2023-28487 json | Sudo before 1.9.13 does not escape control characters in sudoreplay output. | 5.3 - MEDIUM | 2023-03-16 | 2024-02-03 |
| CVE-2023-28486 json | Sudo before 1.9.13 does not escape control characters in log messages. | 5.3 - MEDIUM | 2023-03-16 | 2024-02-03 |
| CVE-2023-27320 json | Sudo before 1.9.13p2 has a double free in the per-command chroot feature. | 7.2 - HIGH | 2023-02-28 | 2023-11-07 |
| CVE-2023-22809 json | In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment var... | 7.8 - HIGH | 2023-01-18 | 2023-11-17 |
| CVE-2023-7090 json | In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment var... | 8.8 - HIGH | 2023-12-23 | 2024-02-03 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Sudo Project | Sudo | 1.9.5 | |||
| Application | Sudo Project | Sudo | 1.9.5 | |||
| Application | Sudo Project | Sudo | 1.9.5 | |||
| Application | Sudo Project | Sudo | 1.9.4 | |||
| Application | Sudo Project | Sudo | 1.9.4 | |||
| Application | Sudo Project | Sudo | 1.9.4 | |||
| Application | Sudo Project | Sudo | 1.9.3 | |||
| Application | Sudo Project | Sudo | 1.9.3 | |||
| Application | Sudo Project | Sudo | 1.9.2 | |||
| Application | Sudo Project | Sudo | 1.9.1 | |||
| Application | Sudo Project | Sudo | 1.9.0 | |||
| Application | Sudo Project | Sudo | 1.8.9 | |||
| Application | Sudo Project | Sudo | 1.8.9 | |||
| Application | Sudo Project | Sudo | 1.8.9 | |||
| Application | Sudo Project | Sudo | 1.8.9 | |||
| Application | Sudo Project | Sudo | 1.8.9 | |||
| Application | Sudo Project | Sudo | 1.8.9 | |||
| Application | Sudo Project | Sudo | 1.8.9 | |||
| Application | Sudo Project | Sudo | 1.8.8 | |||
| Application | Sudo Project | Sudo | 1.8.7 |