Known vulnerabilities in curl (Ubuntu package) 7.58.0-2ubuntu3.24+esm1

Version: 7.58.0-2ubuntu3.24+esm1
Software CPE: cpe:2.3:o:canonical:curl_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting curl (Ubuntu package) version 7.58.0-2ubuntu3.24+esm1 curl (Ubuntu package) 7.58.0-2ubuntu3.24+esm1 is affected by 20 vulnerabilities: 9 medium, 11 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155687 - Insertion of Sensitive Information Into Sent Data
CVE-2026-86414
CWE-201 Medium
No
No
7.35.0-1ubuntu2.20+esm24, 7.47.0-1ubuntu2.19+esm21, 7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 11 more
#VU155682 - Command injection
CVE-2026-87864
CWE-77 Low
No
No
7.35.0-1ubuntu2.20+esm24, 7.47.0-1ubuntu2.19+esm21, 7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101440
SB2026103078
SB2026103120
and 11 more
#VU155677 - Use After Free
CVE-2026-92388
CWE-416 Low
No
No
7.35.0-1ubuntu2.20+esm24, 7.47.0-1ubuntu2.19+esm21, 7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 10 more
#VU155676 - Exposure of sensitive information to an unauthorized actor
CVE-2026-92389
CWE-200 Low
No
No
7.35.0-1ubuntu2.20+esm24, 7.47.0-1ubuntu2.19+esm21, 7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 11 more
#VU155674 - Uncontrolled Recursion
CVE-2026-92391
CWE-674 Low
No
No
7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 10 more
#VU135082 - Insertion of Sensitive Information Into Sent Data
CVE-2026-8924
CWE-201 Medium
No
No
7.35.0-1ubuntu2.20+esm23, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 19 more
#VU135081 - Improper Certificate Validation
CVE-2026-8286
CWE-295 Medium
No
No
7.35.0-1ubuntu2.20+esm20, 7.35.0-1ubuntu2.20+esm23, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 18 more
#VU135079 - Authentication Bypass by Primary Weakness
CVE-2026-8932
CWE-305 Low
No
No
7.58.0-2ubuntu3.24+esm12, 7.68.0-1ubuntu2.25+esm7, 7.81.0-1ubuntu1.27, 8.5.0-2ubuntu10.13, 8.18.0-1ubuntu2.5 24.06.2026 SB2026062427
SB2026081995
SB2026082669
and 19 more
#VU135077 - Authentication Bypass by Capture-replay
CVE-2026-8927
CWE-294 Low
No
No
7.35.0-1ubuntu2.20+esm20, 7.35.0-1ubuntu2.20+esm23, 7.47.0-1ubuntu2.19+esm16, 7.47.0-1ubuntu2.19+esm20, 7.58.0-2ubuntu3.24+esm9, 7.58.0-2ubuntu3.24+esm14, 7.68.0-1ubuntu2.25+esm4, 7.68.0-1ubuntu2.25+esm9, 7.81.0-1ubuntu1.25, 7.81.0-1ubuntu1.29, 8.5.0-2ubuntu10.10, 8.5.0-2ubuntu10.15, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2, 8.18.0-1ubuntu2.7 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 19 more
#VU135076 - Exposure of Data Element to Wrong Session
CVE-2026-8458
CWE-488 Low
No
No
7.35.0-1ubuntu2.20+esm23, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 18 more
#VU135075 - Authentication Bypass by Capture-replay
CVE-2026-11856
CWE-294 Medium
No
No
7.35.0-1ubuntu2.20+esm22, 7.47.0-1ubuntu2.19+esm18, 7.58.0-2ubuntu3.24+esm11, 7.68.0-1ubuntu2.25+esm6, 7.81.0-1ubuntu1.26, 8.5.0-2ubuntu10.12, 8.18.0-1ubuntu2.4 24.06.2026 SB2026062427
SB2026080303
SB2026080441
and 22 more
#VU128459 - Authentication Bypass by Capture-replay
CVE-2026-7168
CWE-294 Medium
No
No
7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1 29.04.2026 SB2026042955
SB2026050481
SB2026052287
and 14 more
#VU128451 - Exposure of Data Element to Wrong Session
CVE-2026-5773
CWE-488 Medium
No
No
7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1 29.04.2026 SB2026042955
SB2026050481
SB2026052032
and 11 more
#VU123889 - Authentication Bypass by Primary Weakness
CVE-2026-3784
CWE-305 Medium
No
No
7.58.0-2ubuntu3.24+esm8, 7.68.0-1ubuntu2.25+esm3, 7.81.0-1ubuntu1.23, 8.5.0-2ubuntu10.8, 8.14.1-2ubuntu1.2 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 20 more
#VU101654 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11053
CWE-200 Low
No
No
7.35.0-1ubuntu2.20+esm21, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25, 7.81.0-1ubuntu1.20, 8.5.0-2ubuntu10.6, 8.9.1-2ubuntu2.2 11.12.2024 SB2024121137
SB2024121189
SB2024121190
and 33 more
#VU97150 - Improper Certificate Validation
CVE-2024-8096
CWE-295 Low
No
No
7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.24, 7.81.0-1ubuntu1.18, 8.5.0-2ubuntu10.4 11.09.2024 SB2024091127
SB2024091141
SB2024091142
and 11 more
#VU95131 - Out-of-bounds read
CVE-2024-7264
CWE-125 Medium
No
No
7.35.0-1ubuntu2.20+esm18, 7.47.0-1ubuntu2.19+esm13, 7.58.0-2ubuntu3.24+esm5, 7.68.0-1ubuntu2.23, 7.81.0-1ubuntu1.17, 8.5.0-2ubuntu10.2 01.08.2024 SB2024080110
SB2024080117
SB20240805104
and 45 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398
CWE-772 Medium
No
No
7.47.0-1ubuntu2.19+esm12, 7.58.0-2ubuntu3.24+esm4, 7.68.0-1ubuntu2.22, 7.81.0-1ubuntu1.16, 8.2.1-1ubuntu3.3, 8.5.0-2ubuntu10.1 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218
CWE-200 Low
No
No
7.47.0-1ubuntu2.19+esm11, 7.58.0-2ubuntu3.24+esm3, 7.68.0-1ubuntu2.21, 7.81.0-1ubuntu1.15, 7.88.1-8ubuntu2.4, 8.2.1-1ubuntu3.2 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546
CWE-73 Low
No
No
7.35.0-1ubuntu2.20+esm17, 7.47.0-1ubuntu2.19+esm10, 7.58.0-2ubuntu3.24+esm2, 7.68.0-1ubuntu2.20, 7.81.0-1ubuntu1.14, 7.88.1-8ubuntu2.3, 8.2.1-1ubuntu3.1 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more