Todd C. Miller Sudo

Name: Todd C. Miller Sudo
Brand: Todd C. Miller

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical13high3medium1low

updated 2026-10-27

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-3156US	high7.8OT critical	100.0% (100th)	KEV	no fix	2021-01-26	≤ 1.9.5p2
CVE-2025-32463US	high7.8OT critical	55.5% (99th)	KEV	no fix	2025-06-30	≤ 1.9.17p1
CVE-2019-14287US	high8.8	63.8% (99th)	Exploit	no fix	2019-10-17	≤ 1.8.19p2
CVE-2023-22809US	high7.8	55.4% (99th)	Exploit	no fix	2023-01-18	≤ 1.9.12p2
CVE-2019-18634US	high7.8	19.3% (97th)	Exploit	no fix	2020-01-29	1.7.1 → 1.8.26
CVE-2017-1000367US	medium6.4	8.07% (95th)	Exploit	no fix	2017-06-05	1.8.6p7 → 1.8.20
CVE-2025-32462US	high8.8OT high	4.48% (91st)	Exploit	no fix	2025-06-30	1.8.8 → 1.9.17p1
CVE-2019-19232US	high7.5	3.29% (88th)	—	no fix	2019-12-19	≤ 1.8.29
CVE-2023-27320US	high7.2	1.66% (77th)	—	no fix	2023-02-28	1.9.8 → 1.9.13p1
CVE-2021-23239US	low2.5	1.04% (64th)	—	no fix	2021-01-12	2 versions
CVE-2023-28487US	medium5.3	0.95% (61st)	—	no fix	2023-03-16	≤ 1.9.13
CVE-2023-28486US	medium5.3	0.92% (60th)	—	no fix	2023-03-16	≤ 1.9.13
CVE-2023-7090US	high8.8	0.69% (52nd)	—	no fix	2023-12-23	≤ 1.8.28
CVE-2017-1000368US	high8.2	0.57% (47th)	—	no fix	2017-06-05	≤ 1.8.20p1
CVE-2023-42465US	high7.0	0.54% (45th)	—	no fix	2023-12-22	≤ 1.9.15
CVE-2022-43995US	high7.1	0.29% (21st)	—	no fix	2022-11-02	1.8.0 → 1.9.12
CVE-2026-35535US	high7.8	0.17% (7th)	—	no fix	2026-04-03	≤ 1.9.17p2

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management3 CVEs
CWE-116Improper Encoding or Escaping of Output2 CVEs
CWE-117Improper Output Neutralization for Logs2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-1319Improper Protection against Electromagnetic Fault Injection (EM-FI)1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.