ZeusQA
Start free

Known exploited vulnerabilities

Sudo vulnerabilities attackers have used

Every Sudo vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 Sudo vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2025-32463, added Sep 29, 2025. Sudo has the most entries (2).

In KEV, all time
2
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every Sudo entry in CISA KEV

  1. CVE-2025-32463

    Added · due

    Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

    Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed…

  2. CVE-2021-3156

    Added · due

    Sudo Heap-Based Buffer Overflow Vulnerability

    Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works