Sudo
Vendor:
First CVE: May 16, 2002 · Active for 24 years
26
Total CVEs
More Total CVEs than 95% of tracked products
2.4
Avg CVEs / Year
Higher CVE frequency than 73% of tracked products
7.1
Avg CVSS
Higher Avg CVSS than 42% of tracked products
7.7%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Sudo over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 16, 2002
24 years ago
Most Recent CVE
Apr 3, 2026
112 days ago
CVE Severity & Scoring
Sudo26 CVEs
12%
81%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local18 (69.2%)
Network7 (26.9%)
Unknown1 (3.8%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low20 (76.9%)
High5 (19.2%)
Unknown1 (3.8%)
User Interaction
None25 (96.2%)
Unknown1 (3.8%)
Required0 (0.0%)
Privileges Required
Low18 (69.2%)
High3 (11.5%)
None4 (15.4%)
Unknown1 (3.8%)
Top CVEs
Signals from CVEs in this product scope (26 CVEs).
26 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-3156HIGH Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line arg | Jan 26, 2021 | 7.8 | 99 | YES | YES |
CVE-2025-32463HIGH Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. | Jun 30, 2025 | 7.8 | 96 | YES | YES |
CVE-2019-14287HIGH In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invok | Oct 17, 2019 | 8.8 | 84 | NO | YES |
CVE-2023-22809HIGH In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a lo | Jan 18, 2023 | 7.8 | 75 | NO | YES |
CVE-2019-18634HIGH In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in | Jan 29, 2020 | 7.8 | 48 | NO | YES |
CVE-2025-32462HIGH Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines. | Jun 30, 2025 | 8.8 | 45 | NO | YES |
CVE-2017-1000367MEDIUM Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and c | Jun 5, 2017 | 6.4 | 37 | NO | YES |
CVE-2015-5602HIGH sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstr | Nov 17, 2015 | 7.2 | 35 | NO | YES |
CVE-2002-0184HIGH Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p ( | May 16, 2002 | 7.8 | 33 | NO | YES |
CVE-2026-35535HIGH In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to p | Apr 3, 2026 | 7.8 | 31 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (26 CVEs).
CISA KEV
2 CVEs
7.7% of CVEs· 97th percentile
Metasploit
3 CVEs
11.5% of CVEs· 97th percentile
Nuclei
3 CVEs
11.5% of CVEs· 97th percentile
ExploitDB
9 CVEs
34.6% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (26 CVEs).
Media Mentions
Signals from CVEs in this product scope (26 CVEs).
Top CNAs Publishing CVEs For Sudo
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.9.5 | 1 | 7.8 | 99.3% | 1 | 1 |
| 1.9.17 | 3 | 8.0 | 10.4% | 1 | 2 |
| 1.9.13 | 1 | 7.2 | 1.7% | 0 | 0 |
| 1.9.12 | 2 | 7.6 | 37.0% | 0 | 1 |
| 1.8.9 | 1 | 7.0 | 0.5% | 0 | 0 |
| 1.8.8 | 1 | 7.0 | 0.5% | 0 | 0 |
| 1.8.20 | 1 | 8.2 | 0.6% | 0 | 0 |
| 1.8.15 | 1 | 7.0 | 0.5% | 0 | 0 |
| 1.8.14 | 1 | 7.0 | 0.5% | 0 | 0 |
| 1.8.13 | 1 | 7.0 | 0.5% | 0 | 0 |
| 1.8.12 | 1 | 7.0 | 0.5% | 0 | 0 |
| 1.8.11 | 1 | 7.0 | 0.5% | 0 | 0 |
| 1.8.10 | 1 | 7.0 | 0.5% | 0 | 0 |