Known vulnerabilities in Ubuntu 24.04 - page 144

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 24.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 9069
Public exploits: 154
Known exploited (KEV): 29
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 24.04 Ubuntu 24.04 is affected by 9069 vulnerabilities: 22 critical, 439 high, 1356 medium, 7250 low Critical High Medium Low

Vulnerabilities (9069)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124874 - Insufficient Verification of Data Authenticity
CVE-2026-26007		 CWE-345 Medium
No
No
 - 06.04.2026 SB2026040616
SB2026040617
SB2026040618
and 30 more
#VU124872 - Use of Cache Containing Sensitive Information
CVE-2026-27205		 CWE-524 Medium
No
No
 - 06.04.2026 SB2026040613
SB2026040615
SB2026040617
and 14 more
#VU124721 - Improper input validation
CVE-2025-59028		 CWE-20 Medium
No
No
 - 01.04.2026 SB2026040127
SB2026040132
SB2026042920
#VU124722 - Improper input validation
CVE-2025-59032		 CWE-20 Medium
No
No
 - 01.04.2026 SB2026040128
SB2026040132
SB2026041137
and 14 more
#VU124723 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59031		 CWE-200 Low
No
No
 - 01.04.2026 SB2026040130
SB2026040132
SB2026041137
and 2 more
#VU124724 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-0394		 CWE-22 Medium
No
No
 - 01.04.2026 SB2026040126
SB2026040132
SB2026041137
and 1 more
#VU124725 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-27860		 CWE-90 Medium
No
No
 - 01.04.2026 SB2026040129
SB2026040132
SB2026042920
#VU124726 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-24031		 CWE-89 Medium
No
No
 - 01.04.2026 SB2026040129
SB2026040132
SB2026042920
#VU124727 - Resource exhaustion
CVE-2026-27859		 CWE-400 Medium
No
No
 - 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 2 more
#VU124728 - Resource exhaustion
CVE-2026-27857		 CWE-400 Medium
No
No
 - 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 20 more
#VU124729 - Resource exhaustion
CVE-2026-27858		 CWE-400 Medium
No
No
 - 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 16 more
#VU124730 - Improper Authentication
CVE-2026-27856		 CWE-287 High
No
No
 - 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 3 more
#VU124731 - Authentication Bypass by Capture-replay
CVE-2026-27855		 CWE-294 Medium
No
No
 - 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 2 more
#VU124068 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-4111		 CWE-835 Medium
No
No
 - 17.03.2026 SB2026031740
SB2026031920
SB2026031927
and 14 more
#VU122832 - Use After Free
CVE-2026-23111		 CWE-416 Low
Public exploit available
No
 - 13.02.2026 SB20260213152
SB2026021911
SB2026031305
and 52 more
#VU122343 - NULL Pointer Dereference
CVE-2026-23060		 CWE-476 Low
No
No
 - 05.02.2026 SB2026020510
SB2026020972
SB2026020973
and 47 more
#VU122329 - Use After Free
CVE-2026-23074		 CWE-416 Low
No
No
 - 04.02.2026 SB2026020494
SB2026020972
SB2026020973
and 106 more
#VU121145 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-12543		 CWE-644 Medium
No
No
 - 10.01.2026 SB2026011002
SB2026021723
SB2026021724
and 9 more
#VU118347 - Resource exhaustion
CVE-2025-60753		 CWE-400 Medium
No
No
 - 12.11.2025 SB2025111209
SB2025112820
SB2025112821
and 6 more
#VU116663 - Exposure of sensitive information to an unauthorized actor
CVE-2025-61594		 CWE-200 Medium
No
No
 - 07.10.2025 SB2025100723
SB2025110338
SB2025111485
and 4 more


Showing elements 2861 - 2880 out of 9069