Uutils vulnerabilities
45 CVEs and advisories name Uutils as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-93658uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid
- CVE-2026-35381uutils coreutils cut Local Logic Error and Data Integrity Issue in Output Filtering
- CVE-2026-35380uutils coreutils cut Local Logic Error and Data Integrity Issue in Delimiter Parsing
- CVE-2026-35379uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling
- CVE-2026-35378uutils coreutils expr Local Denial of Service via Eager Evaluation of Parenthesized Subexpressions
- CVE-2026-35377uutils coreutils env Local Denial of Service via Improper Handling of Backslashes in Split-String Mode
- CVE-2026-35376uutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race Condition
- CVE-2026-35375uutils coreutils split Local Data Integrity Issue via Lossy Filename Encoding
- CVE-2026-35374uutils coreutils split Arbitrary File Truncation via Time-of-Check to Time-of-Use (TOCTOU) Race Condition
- CVE-2026-35373uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 Filenames
- CVE-2026-35372uutils coreutils ln Security Bypass via Improper Handling of the --no-dereference Flag
- CVE-2026-35371uutils coreutils id Misleading Identity Reporting in Pretty Print Mode
- CVE-2026-35370uutils coreutils id Incorrect Access-Control Decisions via Misrepresented Group Membership
- CVE-2026-35369uutils coreutils kill System-wide Process Termination and Denial of Service via Argument Misinterpretation
- CVE-2026-35368uutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) Injection
- CVE-2026-35367uutils coreutils nohup Information Disclosure via Insecure Default Output Permissions
- CVE-2026-35366uutils coreutils printenv Security Inspection Bypass via UTF-8 Enforcement
- CVE-2026-35365uutils coreutils mv Denial of Service and Data Duplication via Improper Symlink Expansion
- CVE-2026-35364uutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race Condition
- CVE-2026-35363uutils coreutils rm Safeguard Bypass via Improper Path Normalization
- CVE-2026-35362uutils coreutils Missing TOCTOU Protection on Non-Linux Unix Platforms in Safe Traversal Module
- CVE-2026-35361uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems
- CVE-2026-35360uutils coreutils touch Arbitrary File Truncation via TOCTOU Race Condition
- CVE-2026-35359uutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink Swap
- CVE-2026-35358uutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream Reading
- CVE-2026-35357uutils coreutils cp Information Disclosure via Permission Handling Race
- CVE-2026-35356uutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink Race
- CVE-2026-35355uutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU Race
- CVE-2026-35354uutils coreutils mv Security Xattr TOCTOU Race in Cross-Device
- CVE-2026-35353uutils coreutils mkdir Permission Exposure Race Condition with -m