Sudo project vulnerabilities
3 published CVEs name Sudo project among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 3
- Last 12 months
- 1
- Critical
- 1
- Known exploited
- 1
Critical 1High 1Medium 0Low 1Not scored 0
CVEs per yearBy the year they were published
- 20252
- 20261
Known exploitedNewest addition to KEV first
- CVE-2025-32463
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
Sudo project · Sudo
ExploitedCritical9.3
Newest CVEs
- CVE-2026-35535
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal…
Sudo project · Sudo
High7.4 - CVE-2025-32463
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
Sudo project · Sudo
ExploitedCritical9.3 - CVE-2025-32462
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on…
Sudo project · Sudo
Low2.8