sudo project sudo

Name: sudo project sudo
Brand: sudo project

productUS

cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical19high3medium2low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-3156US	high7.8OT critical	100.0% (100th)	KEV	1.8.32	2021-01-26	3 versions
CVE-2025-32463US	high7.8OT critical	55.5% (99th)	KEV	1.9.17	2025-06-30	2 versions
CVE-2019-14287US	high8.8	63.8% (99th)	Exploit	1.8.28	2019-10-17	< 1.8.28
CVE-2023-22809US	high7.8	55.4% (99th)	Exploit	1.9.12	2023-01-18	2 versions
CVE-2019-18634US	high7.8	19.3% (97th)	Exploit	1.8.26	2020-01-29	1.7.1 → 1.8.26
CVE-2017-1000367US	medium6.4	8.07% (95th)	Exploit	no fix	2017-06-05	≤ 1.8.20
CVE-2025-32462US	high8.8OT high	4.48% (91st)	Exploit	1.9.17	2025-06-30	2 versions
CVE-2015-5602US	high7.2	1.52% (74th)	Exploit	no fix	2015-11-17	≤ 1.8.14
CVE-2002-0184US	high7.8	1.20% (68th)	Exploit	1.6.6	2002-05-16	< 1.6.6
CVE-2015-8239US	high7.0	0.54% (45th)	Exploit	no fix	2017-10-10	8 versions
CVE-2023-27320US	high7.2	1.66% (77th)	—	1.9.13	2023-02-28	2 versions
CVE-2021-23240US	high7.8	1.08% (65th)	—	1.9.5	2021-01-12	2 versions
CVE-2021-23239US	low2.5	1.04% (64th)	—	1.8.32	2021-01-12	2 versions
CVE-2023-28487US	medium5.3	0.95% (61st)	—	1.9.13	2023-03-16	< 1.9.13
CVE-2023-28486US	medium5.3	0.92% (60th)	—	1.9.13	2023-03-16	< 1.9.13
CVE-2023-7090US	high8.8	0.69% (52nd)	—	1.8.28	2023-12-23	< 1.8.28
CVE-2005-4890US	high7.8	0.63% (50th)	—	no fix	2019-11-04	1.3.0 → 1.7.4
CVE-2017-1000368US	high8.2	0.57% (47th)	—	no fix	2017-06-05	2 versions
CVE-2023-42465US	high7.0	0.54% (45th)	—	1.9.15	2023-12-22	< 1.9.15
CVE-2016-7076US	high7.8	0.48% (41st)	—	no fix	2018-05-29	1.6.8 → 1.8.18
CVE-2014-9680US	low3.3	0.47% (41st)	—	no fix	2017-04-24	≤ 1.8.11
CVE-2019-18684US	high7.0	0.29% (22nd)	—	no fix	2019-11-04	≤ 1.8.29
CVE-2022-43995US	high7.1	0.29% (21st)	—	1.9.12	2022-11-02	2 versions
CVE-2026-35535US	high7.8	0.17% (7th)	—	1.9.17	2026-04-03	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-269Improper Privilege Management3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
CWE-116Improper Encoding or Escaping of Output2 CVEs
CWE-117Improper Output Neutralization for Logs2 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition2 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan