# cve.now: Uutils

The newest entries naming Uutils as an affected vendor (up to 200), of 45 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-93658](https://cve.now/CVE-2026-93658.md): uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid (CVSS 7.3)
- [CVE-2026-35381](https://cve.now/CVE-2026-35381.md): uutils coreutils cut Local Logic Error and Data Integrity Issue in Output Filtering (CVSS 3.3)
- [CVE-2026-35380](https://cve.now/CVE-2026-35380.md): uutils coreutils cut Local Logic Error and Data Integrity Issue in Delimiter Parsing (CVSS 5.5)
- [CVE-2026-35379](https://cve.now/CVE-2026-35379.md): uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling (CVSS 3.3)
- [CVE-2026-35378](https://cve.now/CVE-2026-35378.md): uutils coreutils expr Local Denial of Service via Eager Evaluation of Parenthesized Subexpressions (CVSS 3.3)
- [CVE-2026-35377](https://cve.now/CVE-2026-35377.md): uutils coreutils env Local Denial of Service via Improper Handling of Backslashes in Split-String Mode (CVSS 3.3)
- [CVE-2026-35376](https://cve.now/CVE-2026-35376.md): uutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race Condition (CVSS 4.5)
- [CVE-2026-35375](https://cve.now/CVE-2026-35375.md): uutils coreutils split Local Data Integrity Issue via Lossy Filename Encoding (CVSS 3.3)
- [CVE-2026-35374](https://cve.now/CVE-2026-35374.md): uutils coreutils split Arbitrary File Truncation via Time-of-Check to Time-of-Use (TOCTOU) Race Condition (CVSS 6.3)
- [CVE-2026-35373](https://cve.now/CVE-2026-35373.md): uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 Filenames (CVSS 3.3)
- [CVE-2026-35372](https://cve.now/CVE-2026-35372.md): uutils coreutils ln Security Bypass via Improper Handling of the --no-dereference Flag (CVSS 5.0)
- [CVE-2026-35371](https://cve.now/CVE-2026-35371.md): uutils coreutils id Misleading Identity Reporting in Pretty Print Mode (CVSS 3.3)
- [CVE-2026-35370](https://cve.now/CVE-2026-35370.md): uutils coreutils id Incorrect Access-Control Decisions via Misrepresented Group Membership (CVSS 4.4)
- [CVE-2026-35369](https://cve.now/CVE-2026-35369.md): uutils coreutils kill System-wide Process Termination and Denial of Service via Argument Misinterpretation (CVSS 5.5)
- [CVE-2026-35368](https://cve.now/CVE-2026-35368.md): uutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) Injection (CVSS 7.2)
- [CVE-2026-35367](https://cve.now/CVE-2026-35367.md): uutils coreutils nohup Information Disclosure via Insecure Default Output Permissions (CVSS 3.3)
- [CVE-2026-35366](https://cve.now/CVE-2026-35366.md): uutils coreutils printenv Security Inspection Bypass via UTF-8 Enforcement (CVSS 4.4)
- [CVE-2026-35365](https://cve.now/CVE-2026-35365.md): uutils coreutils mv Denial of Service and Data Duplication via Improper Symlink Expansion (CVSS 6.6)
- [CVE-2026-35364](https://cve.now/CVE-2026-35364.md): uutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race Condition (CVSS 6.3)
- [CVE-2026-35363](https://cve.now/CVE-2026-35363.md): uutils coreutils rm Safeguard Bypass via Improper Path Normalization (CVSS 5.6)
- [CVE-2026-35362](https://cve.now/CVE-2026-35362.md): uutils coreutils Missing TOCTOU Protection on Non-Linux Unix Platforms in Safe Traversal Module (CVSS 3.6)
- [CVE-2026-35361](https://cve.now/CVE-2026-35361.md): uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems (CVSS 3.4)
- [CVE-2026-35360](https://cve.now/CVE-2026-35360.md): uutils coreutils touch Arbitrary File Truncation via TOCTOU Race Condition (CVSS 6.3)
- [CVE-2026-35359](https://cve.now/CVE-2026-35359.md): uutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink Swap (CVSS 4.7)
- [CVE-2026-35358](https://cve.now/CVE-2026-35358.md): uutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream Reading (CVSS 4.4)
- [CVE-2026-35357](https://cve.now/CVE-2026-35357.md): uutils coreutils cp Information Disclosure via Permission Handling Race (CVSS 4.7)
- [CVE-2026-35356](https://cve.now/CVE-2026-35356.md): uutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink Race (CVSS 6.3)
- [CVE-2026-35355](https://cve.now/CVE-2026-35355.md): uutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU Race (CVSS 6.3)
- [CVE-2026-35354](https://cve.now/CVE-2026-35354.md): uutils coreutils mv Security Xattr TOCTOU Race in Cross-Device (CVSS 4.7)
- [CVE-2026-35353](https://cve.now/CVE-2026-35353.md): uutils coreutils mkdir Permission Exposure Race Condition with -m (CVSS 3.3)
- [CVE-2026-35352](https://cve.now/CVE-2026-35352.md): uutils coreutils mkfifo Privilege Escalation via TOCTOU Race Condition (CVSS 7.0)
- [CVE-2026-35351](https://cve.now/CVE-2026-35351.md): uutils coreutils mv Silent Ownership Loss in Cross-Device Operations (CVSS 4.2)
- [CVE-2026-35350](https://cve.now/CVE-2026-35350.md): uutils coreutils cp Unexpected Privileged Executable Creation with -p (CVSS 6.6)
- [CVE-2026-35349](https://cve.now/CVE-2026-35349.md): uutils coreutils Path-Based Safety Bypass with --preserve-root (CVSS 6.7)
- [CVE-2026-35348](https://cve.now/CVE-2026-35348.md): uutils coreutils sort Local Denial of Service via Forced UTF-8 Parsing (CVSS 5.5)
- [CVE-2026-35347](https://cve.now/CVE-2026-35347.md): uutils coreutils comm Silent Data Loss or Denial of Service via Improper Input Validation (CVSS 4.4)
- [CVE-2026-35346](https://cve.now/CVE-2026-35346.md): uutils coreutils comm Silent Data Corruption via Lossy UTF-8 Normalization (CVSS 3.3)
- [CVE-2026-35345](https://cve.now/CVE-2026-35345.md): uutils coreutils tail Privileged Information Disclosure via Symlink Replacement Race (CVSS 5.3)
- [CVE-2026-35344](https://cve.now/CVE-2026-35344.md): uutils coreutils dd Silent Data Corruption via Unconditional Truncation Error Suppression (CVSS 3.3)
- [CVE-2026-35343](https://cve.now/CVE-2026-35343.md): uutils coreutils cut Inconsistent Output Suppression with Newline Delimiters (CVSS 3.3)
- [CVE-2026-35342](https://cve.now/CVE-2026-35342.md): uutils coreutils mktemp Insecure Temporary File Placement via Empty TMPDIR (CVSS 3.3)
- [CVE-2026-35341](https://cve.now/CVE-2026-35341.md): uutils coreutils mkfifo Unauthorized Permission Change on Existing Files (CVSS 7.1)
- [CVE-2026-35340](https://cve.now/CVE-2026-35340.md): uutils coreutils chown and chgrp False Success Exit Code in Recursive Mode (CVSS 5.5)
- [CVE-2026-35339](https://cve.now/CVE-2026-35339.md): uutils coreutils chmod False Success Exit Code in Recursive Mode (CVSS 5.5)
- [CVE-2026-35338](https://cve.now/CVE-2026-35338.md): uutils coreutils chmod Path Traversal Bypass of --preserve-root (CVSS 7.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/uutils
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.