Known vulnerabilities in curl (Ubuntu package) 8.18.0-1ubuntu1

Version: 8.18.0-1ubuntu1
Software CPE: cpe:2.3:o:canonical:curl_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 42
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting curl (Ubuntu package) version 8.18.0-1ubuntu1 curl (Ubuntu package) 8.18.0-1ubuntu1 is affected by 42 vulnerabilities: 1 high, 20 medium, 21 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155694 - Out-of-bounds read
CVE-2026-107928
CWE-125 Medium
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110829
and 4 more
#VU155693 - Exposure of Data Element to Wrong Session
CVE-2026-107929
CWE-488 Low
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110234
and 4 more
#VU155692 - Insertion of Sensitive Information Into Sent Data
CVE-2026-86409
CWE-201 Low
No
No
7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101440
SB2026103078
SB2026103120
and 10 more
#VU155691 - Improper Validation of Certificate with Host Mismatch
CVE-2026-86410
CWE-297 Low
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110234
and 8 more
#VU155689 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-86412
CWE-754 Medium
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110445
and 3 more
#VU155687 - Insertion of Sensitive Information Into Sent Data
CVE-2026-86414
CWE-201 Medium
No
No
7.35.0-1ubuntu2.20+esm24, 7.47.0-1ubuntu2.19+esm21, 7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 11 more
#VU155684 - Insertion of Sensitive Information Into Sent Data
CVE-2026-87862
CWE-201 Low
No
No
7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 9 more
#VU155683 - Insertion of Sensitive Information Into Sent Data
CVE-2026-87863
CWE-201 Low
No
No
8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 10 more
#VU155682 - Command injection
CVE-2026-87864
CWE-77 Low
No
No
7.35.0-1ubuntu2.20+esm24, 7.47.0-1ubuntu2.19+esm21, 7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101440
SB2026103078
SB2026103120
and 11 more
#VU155681 - Improper Certificate Validation
CVE-2026-87865
CWE-295 Medium
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110829
and 5 more
#VU155679 - Improper Validation of Specified Quantity in Input
CVE-2026-92386
CWE-1284 Low
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110234
and 7 more
#VU155678 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-92387
CWE-835 Medium
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110234
and 4 more
#VU155677 - Use After Free
CVE-2026-92388
CWE-416 Low
No
No
7.35.0-1ubuntu2.20+esm24, 7.47.0-1ubuntu2.19+esm21, 7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 10 more
#VU155676 - Exposure of sensitive information to an unauthorized actor
CVE-2026-92389
CWE-200 Low
No
No
7.35.0-1ubuntu2.20+esm24, 7.47.0-1ubuntu2.19+esm21, 7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 11 more
#VU155675 - External Control of File Name or Path
CVE-2026-92390
CWE-73 Low
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110234
and 8 more
#VU155674 - Uncontrolled Recursion
CVE-2026-92391
CWE-674 Low
No
No
7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 10 more
#VU155673 - Use After Free
CVE-2026-92392
CWE-416 High
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026101540
SB2026103078
and 6 more
#VU155671 - Insufficiently Protected Credentials
CVE-2026-94266
CWE-522 Low
No
No
7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 10 more
#VU135081 - Improper Certificate Validation
CVE-2026-8286
CWE-295 Medium
No
No
7.35.0-1ubuntu2.20+esm20, 7.35.0-1ubuntu2.20+esm23, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 18 more
#VU135076 - Exposure of Data Element to Wrong Session
CVE-2026-8458
CWE-488 Low
No
No
7.35.0-1ubuntu2.20+esm23, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 18 more


Showing elements 1 - 20 out of 42