Uutils records
44 published records for vendor uutils.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition11
- CWE-59 Improper Link Resolution Before File Access ('Link Following')4
- CWE-20 Improper Input Validation4
- CWE-281 Improper Preservation of Permissions3
- CWE-176 Improper Handling of Unicode Encoding3
- CWE-253 Incorrect Check of Function Return Value2
The weakness classes this vendor ships most often: where to look.
CWEAll records
44 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2026-35368No exploit | uutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) Injectionuutils · coreutils · CWE-426 | High7.8 | — | 0.1% | Apr 22, 2026 |
30Monitor | CVE-2026-35349No exploit | uutils coreutils Path-Based Safety Bypass with --preserve-rootuutils · coreutils · CWE-59 | High7.7 | — | 0.2% | Apr 22, 2026 |
29Monitor | CVE-2026-35338No exploit | uutils coreutils chmod Path Traversal Bypass of --preserve-rootuutils · coreutils · CWE-22 | High7.3 | — | 0.2% | Apr 22, 2026 |
28Monitor | CVE-2026-35341No exploit | uutils coreutils mkfifo Unauthorized Permission Change on Existing Filesuutils · coreutils · CWE-732 | High7.1 | — | 0.1% | Apr 22, 2026 |
28Monitor | CVE-2026-35352No exploit | uutils coreutils mkfifo Privilege Escalation via TOCTOU Race Conditionuutils · coreutils · CWE-367 | High7.0 | — | 0.1% | Apr 22, 2026 |
26Monitor | CVE-2026-35365No exploit | uutils coreutils mv Denial of Service and Data Duplication via Improper Symlink Expansionuutils · coreutils · CWE-59 | Medium6.6 | — | 0.2% | Apr 22, 2026 |
26Monitor | CVE-2026-35350No exploit | uutils coreutils cp Unexpected Privileged Executable Creation with -puutils · coreutils · CWE-281 | Medium6.6 | — | 0.1% | Apr 22, 2026 |
25Monitor | CVE-2026-35355No exploit | uutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU Raceuutils · coreutils · CWE-367 | Medium6.3 | — | 0.1% | Apr 22, 2026 |
25Monitor | CVE-2026-35356No exploit | uutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink Raceuutils · coreutils · CWE-367 | Medium6.3 | — | 0.1% | Apr 22, 2026 |
25Monitor | CVE-2026-35360No exploit | uutils coreutils touch Arbitrary File Truncation via TOCTOU Race Conditionuutils · coreutils · CWE-367 | Medium6.3 | — | 0.1% | Apr 22, 2026 |
25Monitor | CVE-2026-35364No exploit | uutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race Conditionuutils · coreutils · CWE-367 | Medium6.3 | — | 0.1% | Apr 22, 2026 |
25Monitor | CVE-2026-35374No exploit | uutils coreutils split Arbitrary File Truncation via Time-of-Check to Time-of-Use (TOCTOU) Race Conditionuutils · coreutils · CWE-367 | Medium6.3 | — | 0.1% | Apr 22, 2026 |
23Monitor | CVE-2026-35376No exploit | uutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race Conditionuutils · coreutils · CWE-367 | Medium5.8 | — | 0.1% | Apr 22, 2026 |
22Monitor | CVE-2026-35358No exploit | uutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream Readinguutils · coreutils · CWE-706 | Medium5.5 | — | 0.2% | Apr 22, 2026 |
22Monitor | CVE-2026-35363No exploit | uutils coreutils rm Safeguard Bypass via Improper Path Normalizationuutils · coreutils · CWE-22 | Medium5.6 | — | 0.2% | Apr 22, 2026 |
22Monitor | CVE-2026-35380No exploit | uutils coreutils cut Local Logic Error and Data Integrity Issue in Delimiter Parsinguutils · coreutils · CWE-20 | Medium5.5 | — | 0.2% | Apr 22, 2026 |
22Monitor | CVE-2026-35340No exploit | uutils coreutils chown and chgrp False Success Exit Code in Recursive Modeuutils · coreutils · CWE-253 | Medium5.5 | — | 0.2% | Apr 22, 2026 |
22Monitor | CVE-2026-35339No exploit | uutils coreutils chmod False Success Exit Code in Recursive Modeuutils · coreutils · CWE-253 | Medium5.5 | — | 0.2% | Apr 22, 2026 |
22Monitor | CVE-2026-35369No exploit | uutils coreutils kill System-wide Process Termination and Denial of Service via Argument Misinterpretationuutils · coreutils · CWE-20 | Medium5.5 | — | 0.2% | Apr 22, 2026 |
22Monitor | CVE-2026-35348No exploit | uutils coreutils sort Local Denial of Service via Forced UTF-8 Parsinguutils · coreutils · CWE-248 | Medium5.5 | — | 0.1% | Apr 22, 2026 |
22Monitor | CVE-2026-35373No exploit | uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 Filenamesuutils · coreutils · CWE-176 | Medium5.5 | — | 0.1% | Apr 22, 2026 |
21Monitor | CVE-2026-35345No exploit | uutils coreutils tail Privileged Information Disclosure via Symlink Replacement Raceuutils · coreutils · CWE-59 | Medium5.3 | — | 0.1% | Apr 22, 2026 |
20Monitor | CVE-2026-35372No exploit | uutils coreutils ln Security Bypass via Improper Handling of the --no-dereference Flaguutils · coreutils · CWE-61 | Medium5.0 | — | 0.2% | Apr 22, 2026 |
18Monitor | CVE-2026-35359No exploit | uutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink Swapuutils · coreutils · CWE-59 | Medium4.7 | — | 0.1% | Apr 22, 2026 |
18Monitor | CVE-2026-35357No exploit | uutils coreutils cp Information Disclosure via Permission Handling Raceuutils · coreutils · CWE-367 | Medium4.7 | — | 0.1% | Apr 22, 2026 |
- CVE-2026-3536831Monitor
uutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) Injection
HighCVSS 7.8No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3534930Monitor
uutils coreutils Path-Based Safety Bypass with --preserve-root
HighCVSS 7.7No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3533829Monitor
uutils coreutils chmod Path Traversal Bypass of --preserve-root
HighCVSS 7.3No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3534128Monitor
uutils coreutils mkfifo Unauthorized Permission Change on Existing Files
HighCVSS 7.1No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3535228Monitor
uutils coreutils mkfifo Privilege Escalation via TOCTOU Race Condition
HighCVSS 7.0No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3536526Monitor
uutils coreutils mv Denial of Service and Data Duplication via Improper Symlink Expansion
MediumCVSS 6.6No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3535026Monitor
uutils coreutils cp Unexpected Privileged Executable Creation with -p
MediumCVSS 6.6No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3535525Monitor
uutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU Race
MediumCVSS 6.3No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3535625Monitor
uutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink Race
MediumCVSS 6.3No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3536025Monitor
uutils coreutils touch Arbitrary File Truncation via TOCTOU Race Condition
MediumCVSS 6.3No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3536425Monitor
uutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race Condition
MediumCVSS 6.3No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3537425Monitor
uutils coreutils split Arbitrary File Truncation via Time-of-Check to Time-of-Use (TOCTOU) Race Condition
MediumCVSS 6.3No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3537623Monitor
uutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race Condition
MediumCVSS 5.8No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3535822Monitor
uutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream Reading
MediumCVSS 5.5No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3536322Monitor
uutils coreutils rm Safeguard Bypass via Improper Path Normalization
MediumCVSS 5.6No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3538022Monitor
uutils coreutils cut Local Logic Error and Data Integrity Issue in Delimiter Parsing
MediumCVSS 5.5No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3534022Monitor
uutils coreutils chown and chgrp False Success Exit Code in Recursive Mode
MediumCVSS 5.5No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3533922Monitor
uutils coreutils chmod False Success Exit Code in Recursive Mode
MediumCVSS 5.5No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3536922Monitor
uutils coreutils kill System-wide Process Termination and Denial of Service via Argument Misinterpretation
MediumCVSS 5.5No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3534822Monitor
uutils coreutils sort Local Denial of Service via Forced UTF-8 Parsing
MediumCVSS 5.5No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3537322Monitor
uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 Filenames
MediumCVSS 5.5No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3534521Monitor
uutils coreutils tail Privileged Information Disclosure via Symlink Replacement Race
MediumCVSS 5.3No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3537220Monitor
uutils coreutils ln Security Bypass via Improper Handling of the --no-dereference Flag
MediumCVSS 5.0No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3535918Monitor
uutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink Swap
MediumCVSS 4.7No exploitEPSS 0%uutils · coreutilsApr 22, 2026
- CVE-2026-3535718Monitor
uutils coreutils cp Information Disclosure via Permission Handling Race
MediumCVSS 4.7No exploitEPSS 0%uutils · coreutilsApr 22, 2026