Known vulnerabilities in Ubuntu

Vendor: Canonical Ltd.
Software: Ubuntu
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 25497
Public exploits: 853
Known exploited (KEV): 169

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ubuntu Ubuntu is affected by 25497 known vulnerabilities: 89 critical, 2689 high, 6054 medium, 16662 low Critical High Medium Low

Vulnerabilities (25497)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149951 - Out-of-bounds read
CVE-2026-72522		 CWE-125 Medium
No
No
 - 15.09.2026 SB2026091529
SB2026091539
SB2026091540
and 9 more
#VU149947 - Inefficient Algorithmic Complexity
CVE-2026-76641		 CWE-407 Medium
No
No
 - 15.09.2026 SB2026091530
SB2026091552
SB2026091553
and 4 more
#VU149946 - Inefficient Algorithmic Complexity
CVE-2026-66046		 CWE-407 Medium
No
No
 - 15.09.2026 SB2026091530
SB2026091552
SB2026091553
and 4 more
#VU144339 - Protection Mechanism Failure
CVE-2026-56131		 CWE-693 Medium
No
No
 - 19.08.2026 SB2026081992
SB2026081995
SB20260819108
and 10 more
#VU144340 - Out-of-bounds write
CVE-2026-56132		 CWE-787 High
No
No
 - 19.08.2026 SB2026081992
SB2026081995
SB2026081997
and 9 more
#VU144344 - Integer overflow
CVE-2026-56406		 CWE-190 Medium
No
No
 - 19.08.2026 SB2026081992
SB2026081995
SB20260819116
and 6 more
#VU144345 - Integer overflow
CVE-2026-56407		 CWE-190 Medium
No
No
 - 19.08.2026 SB2026081992
SB2026081995
SB20260819116
and 5 more
#VU144347 - Integer overflow
CVE-2026-56409		 CWE-190 Medium
No
No
 - 19.08.2026 SB2026081992
SB20260819116
SB20260819117
and 4 more
#VU144348 - Integer overflow
CVE-2026-56410		 CWE-190 Medium
No
No
 - 19.08.2026 SB2026081992
SB20260819116
SB20260819117
and 4 more
#VU144349 - Integer overflow
CVE-2026-56411		 CWE-190 Medium
No
No
 - 19.08.2026 SB2026081992
SB20260819116
SB20260819117
and 4 more
#VU143594 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-5917		 CWE-78 High
No
No
 - 16.08.2026 SB20260816530
SB2026081711
SB2026081712
and 12 more
#VU125877 - Out-of-bounds read
CVE-2026-56361		 CWE-125 Low
No
No
 - 14.04.2026 SB2026041434
SB2026091498
SB20260914124
and 4 more
#VU125875 - Integer overflow
CVE-2026-34238		 CWE-190 Low
No
No
 - 14.04.2026 SB2026041434
SB20260424239
SB20260424240
and 6 more
#VU125873 - Off-by-one Error
CVE-2026-40312		 CWE-193 Low
No
No
 - 14.04.2026 SB2026041434
SB20260417154
SB20260417156
and 7 more
#VU125871 - Use After Free
CVE-2026-40311		 CWE-416 Medium
No
No
 - 14.04.2026 SB2026041434
SB20260417154
SB20260417155
and 12 more
#VU125869 - Heap-based Buffer Overflow
CVE-2026-40310		 CWE-122 Medium
No
No
 - 14.04.2026 SB2026041434
SB20260417154
SB20260417155
and 15 more
#VU125194 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-40354		 CWE-367 High
No
No
 - 08.04.2026 SB2026040847
SB2026091493
SB2026091494
and 6 more
#VU124426 - Stack-based buffer overflow
CVE-2026-33536		 CWE-121 Medium
No
No
 - 25.03.2026 SB2026032535
SB2026032772
SB2026032773
and 12 more
#VU124425 - Out-of-bounds write
CVE-2026-33535		 CWE-787 Medium
No
No
 - 25.03.2026 SB2026032535
SB2026032772
SB2026032773
and 13 more
#VU17265 - Server-Side Request Forgery (SSRF)
CVE-2019-3809		 CWE-918 Low
No
No
 - 30.01.2019 SB2019012106
SB2019012219
SB2019012220
and 2 more


Showing elements 1 - 20 out of 25497