Vendor

    Sudo project

    25 known vulnerabilities in products by Sudo project, 2 of them actively exploited (CISA KEV).

    Key figures

    25

    Vulnerabilities

    2

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Sudo project
    CriticalCVE-2025-32463

    Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

    In CISA KEValso in 8 other products

    		9.3
    CriticalCVE-2021-3156

    Sudo Heap-Based Buffer Overflow Vulnerability

    In CISA KEValso in 18 other products

    		7.8
    HighCVE-2019-14287

    Sudo: security vulnerability

    also in 14 other products

    		8.8
    HighCVE-2023-22809

    Sudo: Privilege Escalation

    also in 6 other products

    		7.8
    HighCVE-2019-18634

    Sudo: Stack-Based Buffer Overflow

    also in 1 other product

    		7.8
    MediumCVE-2017-1000367

    Sudo: Information Disclosure

    		6.4
    LowCVE-2025-32462

    Sudo: Incorrect Authorization

    also in 5 other products

    		2.8
    HighCVE-2023-27320

    Sudo: Double Free

    also in 2 other products

    		7.2
    HighCVE-2002-0184

    Sudo: Heap-Based Buffer Overflow

    also in 1 other product

    		7.8
    HighCVE-2021-23240

    Sudo: Privilege Escalation

    also in 3 other products

    		7.8
    HighCVE-2026-82474

    Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

    also in 2 other products

    		7.8
    HighCVE-2026-35535

    Sudo: Privilege Dropping / Lowering Errors

    also in 7 other products

    		7.4
    HighCVE-2023-7090

    Sudo: improper handling of ipa_hostname leads to privilege mismanagement

    also in 5 other products

    		6.6
    HighCVE-2005-4890

    Red Hat Shadow: security vulnerability

    also in 4 other products

    		7.8
    HighCVE-2017-1000368

    Sudo: Information Disclosure

    		8.2
    MediumCVE-2023-28487

    Sudo: security vulnerability

    also in 4 other products

    		5.3
    MediumCVE-2023-28486

    Sudo: security vulnerability

    also in 4 other products

    		5.3
    HighCVE-2023-42465

    Sudo: Authentication Bypass

    		7.0
    HighCVE-2015-8239

    Sudo: security vulnerability

    		7.0
    HighCVE-2016-7076

    Sudo: Incomplete List of Disallowed Inputs

    		6.4
    LowCVE-2021-23239

    Sudo: Race Condition

    also in 5 other products

    		2.5
    Not ratedCVE-2015-5602

    Sudo: Privilege Escalation

    		—
    HighCVE-2022-43995

    Sudo: Buffer Over-read

    also in 1 other product

    		7.1
    HighCVE-2019-18684

    Sudo: Race Condition

    		7.0
    LowCVE-2014-9680

    Sudo: security vulnerability

    		3.3

    Products

    Products by Sudo project
    Sudo283