Known vulnerabilities in Ubuntu

Vendor: Canonical Ltd.
Software: Ubuntu
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 16134
Public exploits: 529
Known exploited (KEV): 126
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ubuntu Ubuntu is affected by 16134 known vulnerabilities: 74 critical, 1837 high, 3712 medium, 10508 low Critical High Medium Low

Vulnerabilities (16134)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139941 - Out-of-bounds write
CVE-2026-6949		 CWE-787 Medium
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 9 more
#VU139942 - Out-of-bounds read
CVE-2026-58216		 CWE-125 Low
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 9 more
#VU139943 - Resource exhaustion
CVE-2026-58218		 CWE-400 Medium
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 9 more
#VU139944 - Improper Access Control
CVE-2026-58221		 CWE-284 Medium
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 9 more
#VU139945 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-58222		 CWE-89 Low
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 9 more
#VU139946 - Improper input validation
CVE-2026-58224		 CWE-20 Medium
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 9 more
#VU139416 - Improper Resource Shutdown or Release
CVE-2026-64526		 CWE-404 Low
No
No
 - 27.07.2026 SB2026072739
SB2026072897
#VU139415 - Improper Resource Shutdown or Release
CVE-2026-64525		 CWE-404 Low
No
No
 - 27.07.2026 SB2026072738
SB2026072897
#VU139414 - Out-of-bounds read
CVE-2026-64524		 CWE-125 Medium
No
No
 - 27.07.2026 SB2026072737
SB2026072897
#VU139413 - Use After Free
CVE-2026-64523		 CWE-416 Low
No
No
 - 27.07.2026 SB2026072736
SB2026072897
#VU139412 - Improper Initialization
CVE-2026-64522		 CWE-665 Low
No
No
 - 27.07.2026 SB2026072735
SB2026072897
#VU139411 - Deadlock
CVE-2026-64521		 CWE-833 Low
No
No
 - 27.07.2026 SB2026072734
SB2026072897
#VU139410 - Out-of-bounds write
CVE-2026-64520		 CWE-787 Low
No
No
 - 27.07.2026 SB2026072733
SB2026072897
SB2026073076
and 1 more
#VU139409 - Improper control of a resource through its lifetime
CVE-2026-64519		 CWE-664 Medium
No
No
 - 27.07.2026 SB2026072732
SB2026072897
#VU139408 - Out-of-bounds read
CVE-2026-64518		 CWE-125 Low
No
No
 - 27.07.2026 SB2026072731
SB2026072897
#VU139406 - Improper Locking
CVE-2026-64528		 CWE-667 Low
No
No
 - 27.07.2026 SB2026072729
SB2026072897
#VU139405 - Out-of-bounds read
CVE-2026-64527		 CWE-125 Medium
No
No
 - 27.07.2026 SB2026072728
SB2026072897
#VU139404 - Out-of-bounds read
CVE-2026-64527		 CWE-125 Medium
No
No
 - 27.07.2026 SB2026072727
SB2026072897
#VU139974 - Incorrect Permission Assignment for Critical Resource
CVE-2026-15779		 CWE-732 Low
No
No
 - 21.07.2026 SB2026072928
SB2026072935
SB2026072936
and 4 more
#VU116912 - Incorrect Regular Expression
CVE-2025-61921		 CWE-185 Medium
No
No
 - 13.10.2025 SB2025101337
SB2026073078


Showing elements 1 - 20 out of 16134