Known vulnerabilities in samba (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:samba_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 76
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting samba (Ubuntu package) samba (Ubuntu package) is affected by 76 known vulnerabilities: 10 high, 39 medium, 27 low Critical High Medium Low

Vulnerabilities (76)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139941 - Out-of-bounds write
CVE-2026-6949
CWE-787 Medium
No
No
2:4.15.13+dfsg-0ubuntu1.13, 2:4.19.5+dfsg-4ubuntu9.7, 2:4.23.6+dfsg-1ubuntu2.2 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 14 more
#VU139942 - Out-of-bounds read
CVE-2026-58216
CWE-125 Low
No
No
2:4.15.13+dfsg-0ubuntu1.13, 2:4.19.5+dfsg-4ubuntu9.7, 2:4.23.6+dfsg-1ubuntu2.2 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 14 more
#VU139943 - Resource exhaustion
CVE-2026-58218
CWE-400 Medium
No
No
2:4.15.13+dfsg-0ubuntu1.13, 2:4.19.5+dfsg-4ubuntu9.7, 2:4.23.6+dfsg-1ubuntu2.2 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 14 more
#VU139944 - Improper Access Control
CVE-2026-58221
CWE-284 Medium
No
No
2:4.15.13+dfsg-0ubuntu1.13, 2:4.19.5+dfsg-4ubuntu9.7, 2:4.23.6+dfsg-1ubuntu2.2 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 14 more
#VU139945 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-58222
CWE-89 Low
No
No
2:4.15.13+dfsg-0ubuntu1.13, 2:4.19.5+dfsg-4ubuntu9.7, 2:4.23.6+dfsg-1ubuntu2.2 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 14 more
#VU139946 - Improper input validation
CVE-2026-58224
CWE-20 Medium
No
No
2:4.15.13+dfsg-0ubuntu1.13, 2:4.19.5+dfsg-4ubuntu9.7, 2:4.23.6+dfsg-1ubuntu2.2 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 14 more
#VU139974 - Incorrect Permission Assignment for Critical Resource
CVE-2026-15779
CWE-732 Low
No
No
2:4.15.13+dfsg-0ubuntu1.13, 2:4.19.5+dfsg-4ubuntu9.7, 2:4.23.6+dfsg-1ubuntu2.2 21.07.2026 SB2026072928
SB2026072935
SB2026072936
and 9 more
#VU132340 - Improper Access Control
CVE-2026-1933
CWE-284 Low
No
No
2:4.15.13+dfsg-0ubuntu1.12, 2:4.19.5+dfsg-4ubuntu9.6, 2:4.22.3+dfsg-4ubuntu2.4, 2:4.23.6+dfsg-1ubuntu2.1 27.05.2026 SB2026052704
SB2026052705
SB2026052711
and 11 more
#VU132341 - Improper Access Control
CVE-2026-2340
CWE-284 Low
No
No
2:4.15.13+dfsg-0ubuntu1.12, 2:4.19.5+dfsg-4ubuntu9.6, 2:4.22.3+dfsg-4ubuntu2.4, 2:4.23.6+dfsg-1ubuntu2.1 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 17 more
#VU132342 - Improper Certificate Validation
CVE-2026-3012
CWE-295 High
No
No
2:4.15.13+dfsg-0ubuntu1.12, 2:4.19.5+dfsg-4ubuntu9.6, 2:4.22.3+dfsg-4ubuntu2.4, 2:4.23.6+dfsg-1ubuntu2.1 27.05.2026 SB2026052704
SB2026052705
SB2026052708
and 14 more
#VU132343 - NULL Pointer Dereference
CVE-2026-3238
CWE-476 Medium
No
No
2:4.15.13+dfsg-0ubuntu1.12, 2:4.19.5+dfsg-4ubuntu9.6, 2:4.22.3+dfsg-4ubuntu2.4, 2:4.23.6+dfsg-1ubuntu2.1 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 13 more
#VU132344 - Command injection
CVE-2026-4408
CWE-77 High
No
No
2:4.15.13+dfsg-0ubuntu1.12, 2:4.19.5+dfsg-4ubuntu9.6, 2:4.22.3+dfsg-4ubuntu2.4, 2:4.23.6+dfsg-1ubuntu2.1 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 20 more
#VU132345 - Command injection
CVE-2026-4480
CWE-77 High
No
No
2:4.15.13+dfsg-0ubuntu1.12, 2:4.19.5+dfsg-4ubuntu9.6, 2:4.22.3+dfsg-4ubuntu2.4, 2:4.23.6+dfsg-1ubuntu2.1 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 18 more
#VU117239 - Out-of-bounds read
CVE-2025-9640
CWE-125 Medium
No
No
2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15, 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4, 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3, 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1, 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4, 2:4.21.4+dfsg-1ubuntu3.5, 2:4.22.3+dfsg-4ubuntu2.1 15.10.2025 SB2025101595
SB20251015151
SB20251015152
and 18 more
#VU117238 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-10230
CWE-78 High
Available
No
2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15, 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4, 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3, 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1, 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4, 2:4.21.4+dfsg-1ubuntu3.5, 2:4.22.3+dfsg-4ubuntu2.1 15.10.2025 SB2025101595
SB20251015151
SB20251015152
and 18 more
#VU110082 - Improper Privilege Management
CVE-2025-0620
CWE-269 Low
No
No
2:4.21.4+dfsg-1ubuntu3.1 03.06.2025 SB2025060305
SB2025060554
SB2025060601
and 2 more
#VU81874 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4154
CWE-200 Medium
No
No
2:4.15.13+dfsg-0ubuntu0.20.04.6, 2:4.15.13+dfsg-0ubuntu0.20.04.7, 2:4.15.13+dfsg-0ubuntu1.5, 2:4.17.7+dfsg-1ubuntu2.3, 2:4.18.6+dfsg-1ubuntu2.1 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 17 more
#VU81872 - Permissions, Privileges, and Access Controls
CVE-2023-4091
CWE-264 Low
No
No
2:4.15.13+dfsg-0ubuntu0.20.04.6, 2:4.15.13+dfsg-0ubuntu0.20.04.7, 2:4.15.13+dfsg-0ubuntu1.5, 2:4.17.7+dfsg-1ubuntu2.3, 2:4.18.6+dfsg-1ubuntu2.1 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 42 more
#VU81871 - Resource Management Errors
CVE-2023-42669
CWE-399 Medium
No
No
2:4.15.13+dfsg-0ubuntu0.20.04.6, 2:4.15.13+dfsg-0ubuntu0.20.04.7, 2:4.15.13+dfsg-0ubuntu1.5, 2:4.17.7+dfsg-1ubuntu2.3, 2:4.18.6+dfsg-1ubuntu2.1 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 35 more
#VU81867 - Resource Management Errors
CVE-2023-42670
CWE-399 Medium
No
No
2:4.15.13+dfsg-0ubuntu0.20.04.6, 2:4.15.13+dfsg-0ubuntu0.20.04.7, 2:4.15.13+dfsg-0ubuntu1.5, 2:4.17.7+dfsg-1ubuntu2.3, 2:4.18.6+dfsg-1ubuntu2.1 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 16 more


Showing elements 1 - 20 out of 76