Known vulnerabilities in curl (Ubuntu package) 8.20.0-2ubuntu11

Version: 8.20.0-2ubuntu11
Software CPE: cpe:2.3:o:canonical:curl_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting curl (Ubuntu package) version 8.20.0-2ubuntu11 curl (Ubuntu package) 8.20.0-2ubuntu11 is affected by 18 vulnerabilities: 1 high, 5 medium, 12 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155694 - Out-of-bounds read
CVE-2026-107928
CWE-125 Medium
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110829
and 4 more
#VU155693 - Exposure of Data Element to Wrong Session
CVE-2026-107929
CWE-488 Low
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110234
and 4 more
#VU155692 - Insertion of Sensitive Information Into Sent Data
CVE-2026-86409
CWE-201 Low
No
No
7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101440
SB2026103078
SB2026103120
and 10 more
#VU155691 - Improper Validation of Certificate with Host Mismatch
CVE-2026-86410
CWE-297 Low
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110234
and 8 more
#VU155689 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-86412
CWE-754 Medium
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110445
and 3 more
#VU155687 - Insertion of Sensitive Information Into Sent Data
CVE-2026-86414
CWE-201 Medium
No
No
7.35.0-1ubuntu2.20+esm24, 7.47.0-1ubuntu2.19+esm21, 7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 11 more
#VU155684 - Insertion of Sensitive Information Into Sent Data
CVE-2026-87862
CWE-201 Low
No
No
7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 9 more
#VU155683 - Insertion of Sensitive Information Into Sent Data
CVE-2026-87863
CWE-201 Low
No
No
8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 10 more
#VU155682 - Command injection
CVE-2026-87864
CWE-77 Low
No
No
7.35.0-1ubuntu2.20+esm24, 7.47.0-1ubuntu2.19+esm21, 7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101440
SB2026103078
SB2026103120
and 11 more
#VU155681 - Improper Certificate Validation
CVE-2026-87865
CWE-295 Medium
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110829
and 5 more
#VU155679 - Improper Validation of Specified Quantity in Input
CVE-2026-92386
CWE-1284 Low
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110234
and 7 more
#VU155678 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-92387
CWE-835 Medium
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110234
and 4 more
#VU155677 - Use After Free
CVE-2026-92388
CWE-416 Low
No
No
7.35.0-1ubuntu2.20+esm24, 7.47.0-1ubuntu2.19+esm21, 7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 10 more
#VU155676 - Exposure of sensitive information to an unauthorized actor
CVE-2026-92389
CWE-200 Low
No
No
7.35.0-1ubuntu2.20+esm24, 7.47.0-1ubuntu2.19+esm21, 7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 11 more
#VU155675 - External Control of File Name or Path
CVE-2026-92390
CWE-73 Low
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026110234
and 8 more
#VU155674 - Uncontrolled Recursion
CVE-2026-92391
CWE-674 Low
No
No
7.58.0-2ubuntu3.24+esm15, 7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 10 more
#VU155673 - Use After Free
CVE-2026-92392
CWE-416 High
No
No
8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026101540
SB2026103078
and 6 more
#VU155671 - Insufficiently Protected Credentials
CVE-2026-94266
CWE-522 Low
No
No
7.68.0-1ubuntu2.25+esm10, 7.81.0-1ubuntu1.30, 8.5.0-2ubuntu10.16, 8.18.0-1ubuntu2.8, 8.20.0-2ubuntu11.1 14.10.2026 SB2026101438
SB2026103078
SB2026103120
and 10 more