CVE-2021-3156
Sudo Heap-Based Buffer Overflow Vulnerability
CVSS
—
No CVSS
EPSS
99.3%
p100
KEV
YES
Apr 6, 2022
Exploit Today
80
0-100
Published: — · Last modified: —
99.3%EPSS · 30 days99.3%
2026-06-302026-07-16
Product
Sudo / Sudo
Vulnerability
Sudo Heap-Based Buffer Overflow Vulnerability
Added to KEV
Apr 6, 2022
Remediate by
Apr 27, 2022
Known ransomware use
No
Summary description
Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2021-3156
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-32463—98.7%
KEV—80Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability—