Known vulnerabilities in Ubuntu

Vendor: Canonical Ltd.
Software: Ubuntu
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 26101
Public exploits: 862
Known exploited (KEV): 173

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ubuntu Ubuntu is affected by 26101 known vulnerabilities: 91 critical, 2722 high, 6148 medium, 17137 low Critical High Medium Low

Vulnerabilities (26101)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143956 - Use After Free
CVE-2026-64787		 CWE-416 Low
No
No
 - 18.08.2026 SB2026081824
SB2026081825
SB2026081826
and 11 more
#VU143691 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-64730		 CWE-451 Low
No
No
 - 17.08.2026 SB2026081770
SB2026081771
SB2026081772
and 9 more
#VU143692 - Improper Access Control
CVE-2026-64728		 CWE-284 Medium
No
No
 - 17.08.2026 SB2026081770
SB2026081771
SB2026081772
and 9 more
#VU143693 - Use After Free
CVE-2026-64783		 CWE-416 Medium
No
No
 - 17.08.2026 SB2026081770
SB2026081771
SB2026081772
and 8 more
#VU143694 - Memory corruption
CVE-2026-64757		 CWE-119 Medium
No
No
 - 17.08.2026 SB2026081770
SB2026081771
SB2026081772
and 9 more
#VU143698 - Out-of-bounds write
CVE-2026-64719		 CWE-787 Medium
No
No
 - 17.08.2026 SB2026081770
SB2026081771
SB2026081772
and 8 more
#VU136940 - Stack-based buffer overflow
CVE-2026-63387		 CWE-121 Medium
No
No
 - 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 9 more
#VU136938 - Out-of-bounds write
CVE-2026-63388		 CWE-787 Low
No
No
 - 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 9 more
#VU135089 - Improper Validation of Certificate with Host Mismatch
CVE-2026-9547		 CWE-297 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 18 more
#VU135087 - Exposure of sensitive information to an unauthorized actor
CVE-2026-9545		 CWE-200 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 12 more
#VU135086 - Use After Free
CVE-2026-9080		 CWE-416 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 13 more
#VU135085 - Insufficiently Protected Credentials
CVE-2026-9079		 CWE-522 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 13 more
#VU135084 - Insufficiently Protected Credentials
CVE-2026-8926		 CWE-522 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026072507
and 16 more
#VU135083 - Double Free
CVE-2026-8925		 CWE-415 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026081995
and 9 more
#VU135082 - Insertion of Sensitive Information Into Sent Data
CVE-2026-8924		 CWE-201 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 19 more
#VU135081 - Improper Certificate Validation
CVE-2026-8286		 CWE-295 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 18 more
#VU135077 - Authentication Bypass by Capture-replay
CVE-2026-8927		 CWE-294 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 19 more
#VU135076 - Exposure of Data Element to Wrong Session
CVE-2026-8458		 CWE-488 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 18 more
#VU125194 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-40354		 CWE-367 High
No
No
 - 08.04.2026 SB2026040847
SB2026091493
SB2026091494
and 6 more
#VU123895 - Resource exhaustion
CVE-2026-27171		 CWE-400 Medium
No
No
 - 11.03.2026 SB2026021955
SB2026031155
SB2026031156
and 11 more


Showing elements 1 - 20 out of 26101