Known vulnerabilities in curl (Ubuntu package) 7.47.0-1ubuntu2.19+esm3

Vendor: Canonical Ltd.

Software: curl (Ubuntu package)

Version: 7.47.0-1ubuntu2.19+esm3

Software CPE: cpe:2.3:o:canonical:curl_ubuntu_package:*:*:*:*:*:ubuntu:*:*

Website: https://www.ubuntu.com/

Total vulnerabilities: 23

Public exploits: 0

Known exploited (KEV): 0

Vulnerabilities by Severity

Vulnerabilities (23)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU155687 - Insertion of Sensitive Information Into Sent Data CVE-2026-86414	CWE-201	Medium	No	No	7.35.0-1ubuntu2.20+esm24, 7.47.0-1ubuntu2.19+esm21, 7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1	14.10.2026	SB2026101438 SB2026103078 SB2026103120 and 11 more
#VU135082 - Insertion of Sensitive Information Into Sent Data CVE-2026-8924	CWE-201	Medium	No	No	7.35.0-1ubuntu2.20+esm23, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2	24.06.2026	SB2026062427 SB2026070135 SB2026071466 and 19 more
#VU135081 - Improper Certificate Validation CVE-2026-8286	CWE-295	Medium	No	No	7.35.0-1ubuntu2.20+esm20, 7.35.0-1ubuntu2.20+esm23, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2	24.06.2026	SB2026062427 SB2026070135 SB2026071466 and 18 more
#VU135077 - Authentication Bypass by Capture-replay CVE-2026-8927	CWE-294	Low	No	No	7.35.0-1ubuntu2.20+esm20, 7.35.0-1ubuntu2.20+esm23, 7.47.0-1ubuntu2.19+esm16, 7.47.0-1ubuntu2.19+esm20, 7.58.0-2ubuntu3.24+esm9, 7.58.0-2ubuntu3.24+esm14, 7.68.0-1ubuntu2.25+esm4, 7.68.0-1ubuntu2.25+esm9, 7.81.0-1ubuntu1.25, 7.81.0-1ubuntu1.29, 8.5.0-2ubuntu10.10, 8.5.0-2ubuntu10.15, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2, 8.18.0-1ubuntu2.7	24.06.2026	SB2026062427 SB2026070135 SB2026071466 and 19 more
#VU135075 - Authentication Bypass by Capture-replay CVE-2026-11856	CWE-294	Medium	No	No	7.35.0-1ubuntu2.20+esm22, 7.47.0-1ubuntu2.19+esm18, 7.58.0-2ubuntu3.24+esm11, 7.68.0-1ubuntu2.25+esm6, 7.81.0-1ubuntu1.26, 8.5.0-2ubuntu10.12, 8.18.0-1ubuntu2.4	24.06.2026	SB2026062427 SB2026080303 SB2026080441 and 22 more
#VU128451 - Exposure of Data Element to Wrong Session CVE-2026-5773	CWE-488	Medium	No	No	7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1	29.04.2026	SB2026042955 SB2026050481 SB2026052032 and 11 more
#VU101654 - Exposure of sensitive information to an unauthorized actor CVE-2024-11053	CWE-200	Low	No	No	7.35.0-1ubuntu2.20+esm21, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25, 7.81.0-1ubuntu1.20, 8.5.0-2ubuntu10.6, 8.9.1-2ubuntu2.2	11.12.2024	SB2024121137 SB2024121189 SB2024121190 and 33 more
#VU97150 - Improper Certificate Validation CVE-2024-8096	CWE-295	Low	No	No	7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.24, 7.81.0-1ubuntu1.18, 8.5.0-2ubuntu10.4	11.09.2024	SB2024091127 SB2024091141 SB2024091142 and 11 more
#VU95131 - Out-of-bounds read CVE-2024-7264	CWE-125	Medium	No	No	7.35.0-1ubuntu2.20+esm18, 7.47.0-1ubuntu2.19+esm13, 7.58.0-2ubuntu3.24+esm5, 7.68.0-1ubuntu2.23, 7.81.0-1ubuntu1.17, 8.5.0-2ubuntu10.2	01.08.2024	SB2024080110 SB2024080117 SB20240805104 and 45 more
#VU87850 - Missing Release of Resource after Effective Lifetime CVE-2024-2398	CWE-772	Medium	No	No	7.47.0-1ubuntu2.19+esm12, 7.58.0-2ubuntu3.24+esm4, 7.68.0-1ubuntu2.22, 7.81.0-1ubuntu1.16, 8.2.1-1ubuntu3.3, 8.5.0-2ubuntu10.1	27.03.2024	SB2024032713 SB2024032740 SB2024032744 and 106 more
#VU83900 - Exposure of sensitive information to an unauthorized actor CVE-2023-46218	CWE-200	Low	No	No	7.47.0-1ubuntu2.19+esm11, 7.58.0-2ubuntu3.24+esm3, 7.68.0-1ubuntu2.21, 7.81.0-1ubuntu1.15, 7.88.1-8ubuntu2.4, 8.2.1-1ubuntu3.2	06.12.2023	SB2023120612 SB2023120644 SB2023120661 and 87 more
#VU81863 - External Control of File Name or Path CVE-2023-38546	CWE-73	Low	No	No	7.35.0-1ubuntu2.20+esm17, 7.47.0-1ubuntu2.19+esm10, 7.58.0-2ubuntu3.24+esm2, 7.68.0-1ubuntu2.20, 7.81.0-1ubuntu1.14, 7.88.1-8ubuntu2.3, 8.2.1-1ubuntu3.1	11.10.2023	SB2023101129 SB2023101135 SB2023101149 and 125 more
#VU73829 - State Issues CVE-2023-27536	CWE-371	Medium	No	No	7.35.0-1ubuntu2.20+esm15, 7.47.0-1ubuntu2.19+esm8, 7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10, 7.85.0-1ubuntu0.5	20.03.2023	SB2023032027 SB2023032028 SB2023032044 and 80 more
#VU73828 - State Issues CVE-2023-27535	CWE-371	Low	No	No	7.35.0-1ubuntu2.20+esm15, 7.47.0-1ubuntu2.19+esm8, 7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10, 7.85.0-1ubuntu0.5	20.03.2023	SB2023032027 SB2023032028 SB2023032044 and 84 more
#VU73826 - Improper input validation CVE-2023-27533	CWE-20	Low	No	No	7.35.0-1ubuntu2.20+esm15, 7.47.0-1ubuntu2.19+esm8, 7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10, 7.85.0-1ubuntu0.5	20.03.2023	SB2023032027 SB2023032028 SB2023032044 and 42 more
#VU70456 - Use After Free CVE-2022-43552	CWE-416	Low	No	No	7.35.0-1ubuntu2.20+esm14, 7.47.0-1ubuntu2.19+esm7, 7.58.0-2ubuntu3.22, 7.68.0-1ubuntu2.15, 7.81.0-1ubuntu1.7, 7.85.0-1ubuntu0.2	21.12.2022	SB2022122102 SB2022122620 SB2022122621 and 66 more
#VU68746 - Expected Behavior Violation CVE-2022-32221	CWE-440	Medium	No	No	7.35.0-1ubuntu2.20+esm13, 7.47.0-1ubuntu2.19+esm6, 7.58.0-2ubuntu3.21, 7.68.0-1ubuntu2.14, 7.81.0-1ubuntu1.6, 7.85.0-1ubuntu0.1	26.10.2022	SB2022102624 SB2022102643 SB2022102644 and 58 more
#VU66881 - Improper input validation CVE-2022-35252	CWE-20	Medium	No	No	7.35.0-1ubuntu2.20+esm12, 7.47.0-1ubuntu2.19+esm5, 7.58.0-2ubuntu3.20, 7.68.0-1ubuntu2.13, 7.81.0-1ubuntu1.4	31.08.2022	SB2022083106 SB2022090108 SB2022090217 and 55 more
#VU64685 - Improper Verification of Cryptographic Signature CVE-2022-32208	CWE-347	Medium	No	No	7.35.0-1ubuntu2.20+esm11, 7.47.0-1ubuntu2.19+esm4, 7.58.0-2ubuntu3.19, 7.68.0-1ubuntu2.12, 7.74.0-1.3ubuntu2.3, 7.81.0-1ubuntu1.3, 7.81.0-1ubuntu1.21	27.06.2022	SB2022062711 SB2022062724 SB2022062816 and 73 more
#VU63008 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-27781	CWE-835	Medium	No	No	7.35.0-1ubuntu2.20+esm11, 7.47.0-1ubuntu2.19+esm4, 7.58.0-2ubuntu3.18, 7.68.0-1ubuntu2.11, 7.74.0-1.3ubuntu2.2, 7.81.0-1ubuntu1.2	11.05.2022	SB2022051112 SB2022051136 SB2022051170 and 36 more

Showing elements 1 - 20 out of 23

Known vulnerabilities in curl (Ubuntu package) 7.47.0-1ubuntu2.19+esm3

Vulnerabilities by Severity

Vulnerabilities (23)

Please verify you're human