Known vulnerabilities in curl (Ubuntu package) - page 2

Software CPE: cpe:2.3:o:canonical:curl_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 94
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting curl (Ubuntu package) curl (Ubuntu package) is affected by 94 known vulnerabilities: 2 high, 53 medium, 38 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128459 - Authentication Bypass by Capture-replay
CVE-2026-7168
CWE-294 Medium
No
No
7.35.0-1ubuntu2.20+esm21, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.5.0-2ubuntu10.11, 8.14.1-2ubuntu1.3, 8.14.1-2ubuntu1.5, 8.18.0-1ubuntu2.1, 8.18.0-1ubuntu2.3 29.04.2026 SB2026042955
SB2026050481
SB2026052287
and 11 more
#VU128456 - Exposure of sensitive information to an unauthorized actor
CVE-2026-6429
CWE-200 Medium
No
No
7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128455 - Origin Validation Error
CVE-2026-6276
CWE-346 Medium
No
No
7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128451 - Exposure of Data Element to Wrong Session
CVE-2026-5773
CWE-488 Medium
No
No
7.35.0-1ubuntu2.20+esm21, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.5.0-2ubuntu10.11, 8.14.1-2ubuntu1.3, 8.14.1-2ubuntu1.5, 8.18.0-1ubuntu2.1, 8.18.0-1ubuntu2.3 29.04.2026 SB2026042955
SB2026050481
SB2026052032
and 9 more
#VU123889 - Authentication Bypass by Primary Weakness
CVE-2026-3784
CWE-305 Medium
No
No
7.58.0-2ubuntu3.24+esm8, 7.68.0-1ubuntu2.25+esm3, 7.81.0-1ubuntu1.23, 8.5.0-2ubuntu10.8, 8.14.1-2ubuntu1.2 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 18 more
#VU123888 - Authentication Bypass by Primary Weakness
CVE-2026-1965
CWE-305 Medium
No
No
7.58.0-2ubuntu3.24+esm8, 7.68.0-1ubuntu2.25+esm3, 7.81.0-1ubuntu1.23, 8.5.0-2ubuntu10.8, 8.14.1-2ubuntu1.2 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 13 more
#VU123887 - Use After Free
CVE-2026-3805
CWE-416 Medium
No
No
7.81.0-1ubuntu1.23, 8.5.0-2ubuntu10.8, 8.14.1-2ubuntu1.2 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 7 more
#VU123886 - Insufficiently Protected Credentials
CVE-2026-3783
CWE-522 Medium
No
No
7.58.0-2ubuntu3.24+esm8, 7.68.0-1ubuntu2.25+esm3, 7.81.0-1ubuntu1.23, 8.5.0-2ubuntu10.8, 8.14.1-2ubuntu1.2 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 18 more
#VU121030 - Improper Authentication
CVE-2025-15224
CWE-287 Low
No
No
7.35.0-1ubuntu2.20+esm19, 7.47.0-1ubuntu2.19+esm15, 7.58.0-2ubuntu3.24+esm7, 7.68.0-1ubuntu2.25+esm2, 7.81.0-1ubuntu1.22, 8.5.0-2ubuntu10.7, 8.14.1-2ubuntu1.1 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 14 more
#VU121029 - Improper Validation of Certificate with Host Mismatch
CVE-2025-15079
CWE-297 Low
No
No
7.35.0-1ubuntu2.20+esm19, 7.47.0-1ubuntu2.19+esm15, 7.58.0-2ubuntu3.24+esm7, 7.68.0-1ubuntu2.25+esm2, 7.81.0-1ubuntu1.22, 8.5.0-2ubuntu10.7, 8.14.1-2ubuntu1.1 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 15 more
#VU121027 - Improper Certificate Validation
CVE-2025-14819
CWE-295 Low
No
No
7.35.0-1ubuntu2.20+esm19, 7.47.0-1ubuntu2.19+esm15, 7.58.0-2ubuntu3.24+esm7, 7.68.0-1ubuntu2.25+esm2, 7.81.0-1ubuntu1.22, 8.5.0-2ubuntu10.7, 8.14.1-2ubuntu1.1 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 13 more
#VU121026 - Insufficiently Protected Credentials
CVE-2025-14524
CWE-522 Low
No
No
7.35.0-1ubuntu2.20+esm19, 7.47.0-1ubuntu2.19+esm15, 7.58.0-2ubuntu3.24+esm7, 7.68.0-1ubuntu2.25+esm2, 7.81.0-1ubuntu1.22, 8.5.0-2ubuntu10.7, 8.14.1-2ubuntu1.1 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 23 more
#VU121025 - Unsynchronized Access to Shared Data in a Multithreaded Context
CVE-2025-14017
CWE-567 Low
No
No
7.35.0-1ubuntu2.20+esm19, 7.47.0-1ubuntu2.19+esm15, 7.58.0-2ubuntu3.24+esm7, 7.68.0-1ubuntu2.25+esm2, 7.81.0-1ubuntu1.22, 8.5.0-2ubuntu10.7, 8.14.1-2ubuntu1.1 07.01.2026 SB2026010741
SB2026010915
SB2026010935
and 12 more
#VU121024 - Protection Mechanism Failure
CVE-2025-13034
CWE-693 Low
No
No
7.35.0-1ubuntu2.20+esm19, 7.47.0-1ubuntu2.19+esm15, 7.58.0-2ubuntu3.24+esm7, 7.68.0-1ubuntu2.25+esm2, 7.81.0-1ubuntu1.22, 8.5.0-2ubuntu10.7, 8.14.1-2ubuntu1.1 07.01.2026 SB2026010741
SB2026012829
SB2026021026
and 3 more
#VU118723 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-11563
CWE-22
No
No
7.35.0-1ubuntu2.20+esm19, 7.47.0-1ubuntu2.19+esm15, 7.58.0-2ubuntu3.24+esm7, 7.68.0-1ubuntu2.25+esm2, 7.81.0-1ubuntu1.22, 8.5.0-2ubuntu10.7, 8.14.1-2ubuntu1.1 24.11.2025 SB2025112458
SB2025112467
SB2025112589
and 4 more
#VU115138 - Out-of-bounds read
CVE-2025-9086
CWE-125 Low
No
No
7.35.0-1ubuntu2.20+esm19, 7.47.0-1ubuntu2.19+esm15, 7.58.0-2ubuntu3.24+esm7, 7.68.0-1ubuntu2.25+esm2, 7.81.0-1ubuntu1.22, 8.5.0-2ubuntu10.7, 8.14.1-2ubuntu1.1 10.09.2025 SB2025091034
SB2025091144
SB2025091301
and 44 more
#VU115137 - Use of Insufficiently Random Values
CVE-2025-10148
CWE-330 Low
No
No
7.35.0-1ubuntu2.20+esm19, 7.47.0-1ubuntu2.19+esm15, 7.58.0-2ubuntu3.24+esm7, 7.68.0-1ubuntu2.25+esm2, 7.81.0-1ubuntu1.22, 8.5.0-2ubuntu10.7, 8.14.1-2ubuntu1.1 10.09.2025 SB2025091034
SB2025091144
SB2025091301
and 10 more
#VU103648 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0167
CWE-200 Low
No
No
7.81.0-1ubuntu1.23, 8.5.0-2ubuntu10.8, 8.14.1-2ubuntu1.2 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 20 more
#VU101654 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11053
CWE-200 Low
No
No
7.35.0-1ubuntu2.20+esm21, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.20, 8.5.0-2ubuntu10.6, 8.5.0-2ubuntu10.11, 8.9.1-2ubuntu2.2, 8.14.1-2ubuntu1.5, 8.18.0-1ubuntu2.3 11.12.2024 SB2024121137
SB2024121189
SB2024121190
and 32 more
#VU99865 - Comparison using wrong factors
CVE-2024-9681
CWE-1025 Low
No
No
7.81.0-1ubuntu1.19, 8.5.0-2ubuntu10.5, 8.9.1-2ubuntu2.1 06.11.2024 SB2024110621
SB2024110655
SB2024110656
and 30 more


Showing elements 21 - 40 out of 94