Exploited Vulnerabilities DailyCVE-2025-32463: Sudo Sudo
EPSS55.4%No. 827 of 1739 in KEV
CVE year2025listed the same year
Same vendor in KEV2
Same product2
| Field | Value |
|---|---|
| Vendor | Sudo |
| Product | Sudo |
| Name | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability |
| Added to KEV | 2025-09-29 |
| US federal due date | 2025-10-20 |
| Ransomware use | Unknown |
| CWE | CWE-829 |
CISA description
Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2021-3156 | Sudo Sudo | 2022-04-06 | 99.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Sudo Sudo vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-09-29.