Known vulnerabilities in curl (Ubuntu package) 7.35.0-1ubuntu2.20+esm3

Vendor: Canonical Ltd.

Software: curl (Ubuntu package)

Version: 7.35.0-1ubuntu2.20+esm3

Software CPE: cpe:2.3:o:canonical:curl_ubuntu_package:*:*:*:*:*:ubuntu:*:*

Website: https://www.ubuntu.com/

Total vulnerabilities: 24

Public exploits: 0

Known exploited (KEV): 0

Vulnerabilities by Severity

Vulnerabilities (24)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU135081 - Improper Certificate Validation CVE-2026-8286	CWE-295	Medium	No	No	7.35.0-1ubuntu2.20+esm20, 7.35.0-1ubuntu2.20+esm23, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2	24.06.2026	SB2026062427 SB2026070135 SB2026071466 and 18 more
#VU135077 - Authentication Bypass by Capture-replay CVE-2026-8927	CWE-294	Low	No	No	7.35.0-1ubuntu2.20+esm20, 7.35.0-1ubuntu2.20+esm23, 7.47.0-1ubuntu2.19+esm16, 7.47.0-1ubuntu2.19+esm20, 7.58.0-2ubuntu3.24+esm9, 7.58.0-2ubuntu3.24+esm14, 7.68.0-1ubuntu2.25+esm4, 7.68.0-1ubuntu2.25+esm9, 7.81.0-1ubuntu1.25, 7.81.0-1ubuntu1.29, 8.5.0-2ubuntu10.10, 8.5.0-2ubuntu10.15, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2, 8.18.0-1ubuntu2.7	24.06.2026	SB2026062427 SB2026070135 SB2026071466 and 19 more
#VU135075 - Authentication Bypass by Capture-replay CVE-2026-11856	CWE-294	Medium	No	No	7.35.0-1ubuntu2.20+esm22, 7.47.0-1ubuntu2.19+esm18, 7.58.0-2ubuntu3.24+esm11, 7.68.0-1ubuntu2.25+esm6, 7.81.0-1ubuntu1.26, 8.5.0-2ubuntu10.12, 8.18.0-1ubuntu2.4	24.06.2026	SB2026062427 SB2026080303 SB2026080441 and 22 more
#VU101654 - Exposure of sensitive information to an unauthorized actor CVE-2024-11053	CWE-200	Low	No	No	7.35.0-1ubuntu2.20+esm21, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25, 7.81.0-1ubuntu1.20, 8.5.0-2ubuntu10.6, 8.9.1-2ubuntu2.2	11.12.2024	SB2024121137 SB2024121189 SB2024121190 and 33 more
#VU95131 - Out-of-bounds read CVE-2024-7264	CWE-125	Medium	No	No	7.35.0-1ubuntu2.20+esm18, 7.47.0-1ubuntu2.19+esm13, 7.58.0-2ubuntu3.24+esm5, 7.68.0-1ubuntu2.23, 7.81.0-1ubuntu1.17, 8.5.0-2ubuntu10.2	01.08.2024	SB2024080110 SB2024080117 SB20240805104 and 45 more
#VU81863 - External Control of File Name or Path CVE-2023-38546	CWE-73	Low	No	No	7.35.0-1ubuntu2.20+esm17, 7.47.0-1ubuntu2.19+esm10, 7.58.0-2ubuntu3.24+esm2, 7.68.0-1ubuntu2.20, 7.81.0-1ubuntu1.14, 7.88.1-8ubuntu2.3, 8.2.1-1ubuntu3.1	11.10.2023	SB2023101129 SB2023101135 SB2023101149 and 125 more
#VU73829 - State Issues CVE-2023-27536	CWE-371	Medium	No	No	7.35.0-1ubuntu2.20+esm15, 7.47.0-1ubuntu2.19+esm8, 7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10, 7.85.0-1ubuntu0.5	20.03.2023	SB2023032027 SB2023032028 SB2023032044 and 80 more
#VU73828 - State Issues CVE-2023-27535	CWE-371	Low	No	No	7.35.0-1ubuntu2.20+esm15, 7.47.0-1ubuntu2.19+esm8, 7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10, 7.85.0-1ubuntu0.5	20.03.2023	SB2023032027 SB2023032028 SB2023032044 and 84 more
#VU73826 - Improper input validation CVE-2023-27533	CWE-20	Low	No	No	7.35.0-1ubuntu2.20+esm15, 7.47.0-1ubuntu2.19+esm8, 7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10, 7.85.0-1ubuntu0.5	20.03.2023	SB2023032027 SB2023032028 SB2023032044 and 42 more
#VU70456 - Use After Free CVE-2022-43552	CWE-416	Low	No	No	7.35.0-1ubuntu2.20+esm14, 7.47.0-1ubuntu2.19+esm7, 7.58.0-2ubuntu3.22, 7.68.0-1ubuntu2.15, 7.81.0-1ubuntu1.7, 7.85.0-1ubuntu0.2	21.12.2022	SB2022122102 SB2022122620 SB2022122621 and 66 more
#VU68746 - Expected Behavior Violation CVE-2022-32221	CWE-440	Medium	No	No	7.35.0-1ubuntu2.20+esm13, 7.47.0-1ubuntu2.19+esm6, 7.58.0-2ubuntu3.21, 7.68.0-1ubuntu2.14, 7.81.0-1ubuntu1.6, 7.85.0-1ubuntu0.1	26.10.2022	SB2022102624 SB2022102643 SB2022102644 and 58 more
#VU66881 - Improper input validation CVE-2022-35252	CWE-20	Medium	No	No	7.35.0-1ubuntu2.20+esm12, 7.47.0-1ubuntu2.19+esm5, 7.58.0-2ubuntu3.20, 7.68.0-1ubuntu2.13, 7.81.0-1ubuntu1.4	31.08.2022	SB2022083106 SB2022090108 SB2022090217 and 55 more
#VU64685 - Improper Verification of Cryptographic Signature CVE-2022-32208	CWE-347	Medium	No	No	7.35.0-1ubuntu2.20+esm11, 7.47.0-1ubuntu2.19+esm4, 7.58.0-2ubuntu3.19, 7.68.0-1ubuntu2.12, 7.74.0-1.3ubuntu2.3, 7.81.0-1ubuntu1.3, 7.81.0-1ubuntu1.21	27.06.2022	SB2022062711 SB2022062724 SB2022062816 and 73 more
#VU63008 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-27781	CWE-835	Medium	No	No	7.35.0-1ubuntu2.20+esm11, 7.47.0-1ubuntu2.19+esm4, 7.58.0-2ubuntu3.18, 7.68.0-1ubuntu2.11, 7.74.0-1.3ubuntu2.2, 7.81.0-1ubuntu1.2	11.05.2022	SB2022051112 SB2022051136 SB2022051170 and 36 more
#VU56615 - Insufficient Verification of Data Authenticity CVE-2021-22947	CWE-345	Medium	No	No	7.35.0-1ubuntu2.20+esm8, 7.47.0-1ubuntu2.19+esm1, 7.47.01ubuntu2.19+esm2, 7.58.0-2ubuntu3.15, 7.58.0-2ubuntu3.16, 7.68.0-1ubuntu2.7, 7.74.0-1ubuntu2.3	15.09.2021	SB2021091514 SB2021091601 SB2021091715 and 43 more
#VU56613 - Cleartext Transmission of Sensitive Information CVE-2021-22946	CWE-319	Medium	No	No	7.35.0-1ubuntu2.20+esm8, 7.47.0-1ubuntu2.19+esm1, 7.47.01ubuntu2.19+esm2, 7.58.0-2ubuntu3.15, 7.58.0-2ubuntu3.16, 7.68.0-1ubuntu2.7, 7.74.0-1ubuntu2.3	15.09.2021	SB2021091514 SB2021091601 SB2021091715 and 53 more
#VU55149 - Use of Uninitialized Variable CVE-2021-22925	CWE-457	Medium	No	No	7.35.0-1ubuntu2.20+esm14, 7.47.0-1ubuntu2.19+esm3, 7.58.0-2ubuntu3.14, 7.68.0-1ubuntu2.6, 7.74.0-1ubuntu2.1	21.07.2021	SB2021072108 SB2021072162 SB2021072202 and 38 more
#VU53587 - Use of Uninitialized Variable CVE-2021-22898	CWE-457	Medium	No	No	7.35.0-1ubuntu2.20+esm14, 7.47.0-1ubuntu2.19+esm3, 7.58.0-2ubuntu3.14, 7.68.0-1ubuntu2.6, 7.74.0-1ubuntu2.1	26.05.2021	SB2021052620 SB2021052711 SB2021060128 and 47 more
#VU51821 - Exposure of sensitive information to an unauthorized actor CVE-2021-22876	CWE-200	Medium	No	No	7.35.0-1ubuntu2.20+esm7, 7.47.0-1ubuntu2.19, 7.58.0-2ubuntu3.13, 7.68.0-1ubuntu2.5, 7.68.0-1ubuntu4.3	31.03.2021	SB2021033111 SB2021040104 SB2021040117 and 31 more
#VU45794 - Expired pointer dereference CVE-2020-8231	CWE-825	Low	No	No	7.35.0-1ubuntu2.20+esm5, 7.47.0-1ubuntu2.16, 7.47.0-1ubuntu2.18, 7.58.0-2ubuntu3.10, 7.58.0-2ubuntu3.12, 7.68.0-1ubuntu2.2, 7.68.0-1ubuntu2.4, 7.68.0-1ubuntu4.2	20.08.2020	SB2020081916 SB2020082001 SB2020081920 and 29 more

Showing elements 1 - 20 out of 24

Known vulnerabilities in curl (Ubuntu package) 7.35.0-1ubuntu2.20+esm3

Vulnerabilities by Severity

Vulnerabilities (24)

Please verify you're human