Known vulnerabilities in Ubuntu 24.04 - page 129

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 24.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 9069
Public exploits: 154
Known exploited (KEV): 29
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 24.04 Ubuntu 24.04 is affected by 9069 vulnerabilities: 22 critical, 439 high, 1356 medium, 7250 low Critical High Medium Low

Vulnerabilities (9069)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130455 - Out-of-bounds write
CVE-2026-40685		 CWE-787 Medium
No
No
 - 07.05.2026 SB2026050764
SB2026050766
SB2026051417
and 2 more
#VU130456 - Out-of-bounds read
CVE-2026-40686		 CWE-125 Medium
No
No
 - 07.05.2026 SB2026050764
SB2026050766
SB2026051417
and 2 more
#VU130457 - Out-of-bounds write
CVE-2026-40687		 CWE-787 Medium
No
No
 - 07.05.2026 SB2026050764
SB2026050766
SB2026051417
and 2 more
#VU130190 - Improper input validation
CVE-2026-5766		 CWE-20 Medium
No
No
 - 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU130191 - Session Fixation
CVE-2026-35192		 CWE-384 Medium
No
No
 - 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 10 more
#VU130192 - Use of Web Browser Cache Containing Sensitive Information
CVE-2026-6907		 CWE-525 Medium
No
No
 - 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU128460 - Authentication Bypass by Primary Weakness
CVE-2026-5545		 CWE-305 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 11 more
#VU128459 - Authentication Bypass by Capture-replay
CVE-2026-7168		 CWE-294 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026052287
and 10 more
#VU128456 - Exposure of sensitive information to an unauthorized actor
CVE-2026-6429		 CWE-200 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128455 - Origin Validation Error
CVE-2026-6276		 CWE-346 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128454 - Insufficiently Protected Credentials
CVE-2026-6253		 CWE-522 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128451 - Exposure of Data Element to Wrong Session
CVE-2026-5773		 CWE-488 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026052032
and 9 more
#VU128445 - Cleartext Transmission of Sensitive Information
CVE-2026-4873		 CWE-319 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128398 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-41205		 CWE-22 Medium
No
No
 - 28.04.2026 SB20260428216
SB2026050603
SB2026051399
and 2 more
#VU128395 - Improper input validation
CVE-2026-33748		 CWE-20 Medium
No
No
 - 28.04.2026 SB20260428214
SB20260428220
SB2026050767
and 8 more
#VU127864 - Improper control of a resource through its lifetime
CVE-2026-31431		 CWE-664 High
Public exploit available
Exploited
 - 25.04.2026 SB20260425182
SB2026043080
SB2026050204
and 129 more
#VU127046 - Improper input validation
CVE-2026-27135		 CWE-20 Medium
No
No
 - 23.04.2026 SB2026042395
SB20260423101
SB20260423102
and 33 more
#VU113715 - Improper input validation
CVE-2019-15237		 CWE-20 Medium
No
No
 - 06.08.2025 SB2019040702
SB2025080643
SB2026043079
#VU97241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38357		 CWE-79 Medium
No
No
 - 13.09.2024 SB2024091335
SB2024091336
SB2024092013
and 4 more
#VU92821 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38356		 CWE-79 Medium
No
No
 - 20.06.2024 SB20240620149
SB2024090468
SB2024091336
and 4 more


Showing elements 2561 - 2580 out of 9069