CVEs we hold for Uutils

Records whose assigning authority named Uutils as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-93658uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuiduutils coreutils

CVE-2026-35381uutils coreutils cut Local Logic Error and Data Integrity Issue in Output FilteringUutils coreutils

CVE-2026-35380uutils coreutils cut Local Logic Error and Data Integrity Issue in Delimiter ParsingUutils coreutils

CVE-2026-35379uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class HandlingUutils coreutils

CVE-2026-35378uutils coreutils expr Local Denial of Service via Eager Evaluation of Parenthesized SubexpressionsUutils coreutils

CVE-2026-35377uutils coreutils env Local Denial of Service via Improper Handling of Backslashes in Split-String ModeUutils coreutils

CVE-2026-35376uutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race ConditionUutils coreutils

CVE-2026-35375uutils coreutils split Local Data Integrity Issue via Lossy Filename EncodingUutils coreutils

CVE-2026-35374uutils coreutils split Arbitrary File Truncation via Time-of-Check to Time-of-Use (TOCTOU) Race ConditionUutils coreutils

CVE-2026-35373uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 FilenamesUutils coreutils

CVE-2026-35372uutils coreutils ln Security Bypass via Improper Handling of the --no-dereference FlagUutils coreutils

CVE-2026-35371uutils coreutils id Misleading Identity Reporting in Pretty Print ModeUutils coreutils

CVE-2026-35370uutils coreutils id Incorrect Access-Control Decisions via Misrepresented Group MembershipUutils coreutils

CVE-2026-35369uutils coreutils kill System-wide Process Termination and Denial of Service via Argument MisinterpretationUutils coreutils

CVE-2026-35368uutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) InjectionUutils coreutils

CVE-2026-35367uutils coreutils nohup Information Disclosure via Insecure Default Output PermissionsUutils coreutils

CVE-2026-35366uutils coreutils printenv Security Inspection Bypass via UTF-8 EnforcementUutils coreutils

CVE-2026-35365uutils coreutils mv Denial of Service and Data Duplication via Improper Symlink ExpansionUutils coreutils

CVE-2026-35364uutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race ConditionUutils coreutils

CVE-2026-35363uutils coreutils rm Safeguard Bypass via Improper Path NormalizationUutils coreutils

CVE-2026-35362uutils coreutils Missing TOCTOU Protection on Non-Linux Unix Platforms in Safe Traversal ModuleUutils coreutils

CVE-2026-35361uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux SystemsUutils coreutils

CVE-2026-35360uutils coreutils touch Arbitrary File Truncation via TOCTOU Race ConditionUutils coreutils

CVE-2026-35359uutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink SwapUutils coreutils

CVE-2026-35358uutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream ReadingUutils coreutils

CVE-2026-35357uutils coreutils cp Information Disclosure via Permission Handling RaceUutils coreutils

CVE-2026-35356uutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink RaceUutils coreutils

CVE-2026-35355uutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU RaceUutils coreutils

CVE-2026-35354uutils coreutils mv Security Xattr TOCTOU Race in Cross-DeviceUutils coreutils

CVE-2026-35353uutils coreutils mkdir Permission Exposure Race Condition with -mUutils coreutils

CVE-2026-35352uutils coreutils mkfifo Privilege Escalation via TOCTOU Race ConditionUutils coreutils

CVE-2026-35351uutils coreutils mv Silent Ownership Loss in Cross-Device OperationsUutils coreutils

CVE-2026-35350uutils coreutils cp Unexpected Privileged Executable Creation with -pUutils coreutils

CVE-2026-35349uutils coreutils Path-Based Safety Bypass with --preserve-rootUutils coreutils

CVE-2026-35348uutils coreutils sort Local Denial of Service via Forced UTF-8 ParsingUutils coreutils

CVE-2026-35347uutils coreutils comm Silent Data Loss or Denial of Service via Improper Input ValidationUutils coreutils

CVE-2026-35346uutils coreutils comm Silent Data Corruption via Lossy UTF-8 NormalizationUutils coreutils

CVE-2026-35345uutils coreutils tail Privileged Information Disclosure via Symlink Replacement RaceUutils coreutils

CVE-2026-35344uutils coreutils dd Silent Data Corruption via Unconditional Truncation Error SuppressionUutils coreutils

CVE-2026-35343uutils coreutils cut Inconsistent Output Suppression with Newline DelimitersUutils coreutils

CVE-2026-35342uutils coreutils mktemp Insecure Temporary File Placement via Empty TMPDIRUutils coreutils

CVE-2026-35341uutils coreutils mkfifo Unauthorized Permission Change on Existing FilesUutils coreutils

CVE-2026-35340uutils coreutils chown and chgrp False Success Exit Code in Recursive ModeUutils coreutils

CVE-2026-35339uutils coreutils chmod False Success Exit Code in Recursive ModeUutils coreutils

CVE-2026-35338uutils coreutils chmod Path Traversal Bypass of --preserve-rootUutils coreutils

45 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.