Known vulnerabilities in Ubuntu 16.04 - page 18

Software: Ubuntu
Version: 16.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Total vulnerabilities: 5285
Public exploits: 308
Known exploited (KEV): 61
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 16.04 Ubuntu 16.04 is affected by 5285 vulnerabilities: 27 critical, 992 high, 1810 medium, 2455 low Critical High Medium Low

Vulnerabilities (5285)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128398 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-41205
CWE-22 Medium
No
No
- 28.04.2026 SB20260428216
SB2026050603
SB2026051399
and 2 more
#VU128323 - UNIX Symbolic Link (Symlink) Following
CVE-2026-33056
CWE-61 Medium
No
No
- 28.04.2026 SB2026042866
SB2026042889
SB2026042890
and 61 more
#VU128271 - Improper input validation
CVE-2026-34881
CWE-20 Medium
No
No
- 28.04.2026 SB2026042831
SB2026042838
SB2026071568
#VU127864 - Improper control of a resource through its lifetime
CVE-2026-31431
CWE-664 High
Public exploit available
Exploited
- 25.04.2026 SB20260425182
SB2026043080
SB2026050204
and 129 more
#VU127046 - Improper input validation
CVE-2026-27135
CWE-20 Medium
No
No
- 23.04.2026 SB2026042395
SB20260423101
SB20260423102
and 33 more
#VU126937 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-41651
CWE-367 Low
Public exploit available
No
- 23.04.2026 SB2026042354
SB20260424303
SB2026042911
and 17 more
#VU125331 - Integer overflow
CVE-2026-34380
CWE-190 Medium
No
No
- 08.04.2026 SB2026040875
SB2026040885
SB2026040886
and 10 more
#VU125329 - Integer overflow
CVE-2026-34588
CWE-190 Low
No
No
- 08.04.2026 SB2026040875
SB2026040885
SB2026040886
and 15 more
#VU125101 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-39881
CWE-78 Medium
No
No
- 08.04.2026 SB2026040828
SB2026041567
SB2026042494
and 9 more
#VU125036 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-35177
CWE-22 Medium
No
No
- 07.04.2026 SB2026040793
SB2026042846
SB2026050311
and 10 more
#VU124874 - Insufficient Verification of Data Authenticity
CVE-2026-26007
CWE-345 Medium
No
No
- 06.04.2026 SB2026040616
SB2026040617
SB2026040618
and 29 more
#VU122451 - Protection Mechanism Failure
CVE-2026-25916
CWE-693 Medium
Public exploit available
No
- 08.02.2026 SB2026020801
SB2026021283
SB2026021284
and 5 more
#VU122450 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-26079
CWE-79 Medium
No
No
- 08.02.2026 SB2026020801
SB2026021283
SB2026021284
and 5 more
#VU113715 - Improper input validation
CVE-2019-15237
CWE-20 Medium
No
No
- 06.08.2025 SB2019040702
SB2025080643
SB2026043079
#VU97241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38357
CWE-79 Medium
No
No
- 13.09.2024 SB2024091335
SB2024091336
SB2024092013
and 4 more
#VU96373 - Exposure of sensitive information to an unauthorized actor
CVE-2024-32498
CWE-200 Low
No
No
- 21.08.2024 SB20240821106
SB20240821107
SB20240821108
and 8 more
#VU95308 - Exposure of sensitive information to an unauthorized actor
CVE-2024-42010
CWE-200 Medium
Public exploit available
No
- 05.08.2024 SB2024080505
SB2024080584
SB2024080585
and 4 more
#VU95299 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-42008
CWE-79 Low
Public exploit available
No
- 05.08.2024 SB2024080505
SB2024080584
SB2024080585
and 4 more
#VU92821 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38356
CWE-79 Medium
No
No
- 20.06.2024 SB20240620149
SB2024090468
SB2024091336
and 4 more
#VU77452 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-27476
CWE-611 Medium
No
No
- 15.06.2023 SB2023061551
SB2023061555
SB2023081835
and 4 more


Showing elements 341 - 360 out of 5285