Known vulnerabilities in Ubuntu 20.04

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 20.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 9566
Public exploits: 337
Known exploited (KEV): 83
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 20.04 Ubuntu 20.04 is affected by 9566 vulnerabilities: 46 critical, 1233 high, 2861 medium, 5423 low Critical High Medium Low

Vulnerabilities (9566)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139808 - Improper Validation of Syntactic Correctness of Input
CVE-2026-40198		 CWE-1286 High
No
No
 - 28.07.2026 SB2026072806
SB2026072807
SB2026072808
and 7 more
#VU139806 - Improper Handling of Length Parameter Inconsistency
CVE-2026-40199		 CWE-130 Medium
No
No
 - 28.07.2026 SB2026072805
SB2026072807
SB2026072808
and 7 more
#VU139789 - Use After Free
CVE-2026-64221		 CWE-416 Low
No
No
 - 27.07.2026 SB20260727370
SB2026072892
SB2026072897
and 3 more
#VU139788 - Use of Uninitialized Variable
CVE-2026-64220		 CWE-457 Low
No
No
 - 27.07.2026 SB20260727369
SB2026072892
SB2026072897
and 3 more
#VU139787 - Out-of-bounds read
CVE-2026-64219		 CWE-125 Low
No
No
 - 27.07.2026 SB20260727368
SB2026072892
SB2026072897
and 3 more
#VU139786 - Stack-based buffer overflow
CVE-2026-64219		 CWE-121 Low
No
No
 - 27.07.2026 SB20260727367
SB2026072892
SB2026072897
and 3 more
#VU139785 - Use After Free
CVE-2026-64218		 CWE-416 Low
No
No
 - 27.07.2026 SB20260727366
SB2026072892
SB2026072897
and 3 more
#VU133907 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-29170		 CWE-79 Medium
No
No
 - 08.06.2026 SB2026060493
SB2026062422
SB20260624100
and 11 more
#VU133908 - Use After Free
CVE-2026-29167		 CWE-416 Low
No
No
 - 08.06.2026 SB2026060493
SB2026062422
SB20260624100
and 10 more
#VU130529 - Function Call with Incorrectly Specified Arguments
CVE-2026-43200		 CWE-628 Low
No
No
 - 07.05.2026 SB20260507140
SB2026070284
SB2026070310
and 19 more
#VU129545 - Information Exposure Through Timing Discrepancy
CVE-2026-33006		 CWE-208 High
Public exploit available
No
 - 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 10 more
#VU127955 - Allocation of Resources Without Limits or Throttling
CVE-2026-22815		 CWE-770 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127954 - Resource exhaustion
CVE-2026-34513		 CWE-400 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127953 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-34514		 CWE-93 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127951 - Improper input validation
CVE-2026-34516		 CWE-20 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU123978 - Stack-based buffer overflow
CVE-2026-32259		 CWE-121 High
No
No
 - 13.03.2026 SB2026031159
SB20260415161
SB20260415162
and 10 more
#VU123905 - Heap-based Buffer Overflow
CVE-2026-30936		 CWE-122 Medium
No
No
 - 11.03.2026 SB2026031159
SB20260415161
SB20260415162
and 11 more
#VU123902 - Heap-based Buffer Overflow
CVE-2026-30937		 CWE-122 Medium
No
No
 - 11.03.2026 SB2026031159
SB20260415161
SB20260415162
and 12 more
#VU123890 - Heap-based Buffer Overflow
CVE-2026-31853		 CWE-122 Medium
No
No
 - 11.03.2026 SB2026031159
SB20260415161
SB20260415162
and 11 more
#VU116912 - Incorrect Regular Expression
CVE-2025-61921		 CWE-185 Medium
No
No
 - 13.10.2025 SB2025101337
SB2026073078


Showing elements 1 - 20 out of 9566