Known vulnerabilities in Ubuntu 24.04 - page 168

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 24.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 14196
Public exploits: 164
Known exploited (KEV): 35

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 24.04 Ubuntu 24.04 is affected by 14196 vulnerabilities: 25 critical, 563 high, 2029 medium, 11578 low Critical High Medium Low

Vulnerabilities (14196)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111970 - Expected Behavior Violation
CVE-2025-4435		 CWE-440 Low
No
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 59 more
#VU111969 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12718		 CWE-22 Medium
No
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 62 more
#VU111968 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4138		 CWE-59 High
Public exploit available
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 64 more
#VU111967 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4330		 CWE-59 High
No
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 67 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517		 CWE-22 High
Public exploit available
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU111389 - Improper Access Control
CVE-2025-6020		 CWE-284 Low
No
No
 - 19.06.2025 SB2025061987
SB2025061992
SB20250619103
and 69 more
#VU111385 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-6019		 CWE-362 Low
Public exploit available
No
 - 19.06.2025 SB2025061983
SB2025061988
SB2025061989
and 21 more
#VU111146 - Integer overflow
CVE-2025-5916		 CWE-190 High
No
No
 - 16.06.2025 SB2025061602
SB2025061603
SB2025061604
and 11 more
#VU111144 - Off-by-one Error
CVE-2025-5917		 CWE-193 High
No
No
 - 16.06.2025 SB2025061602
SB2025061603
SB2025061604
and 9 more
#VU110251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4673		 CWE-200 Low
No
No
 - 07.06.2025 SB2025060701
SB2025060702
SB2025061002
and 35 more
#VU110203 - Improper input validation
CVE-2025-48432		 CWE-20 Medium
No
No
 - 04.06.2025 SB2025060452
SB2025060831
SB2025060832
and 18 more
#VU110003 - Deserialization of Untrusted Data
CVE-2025-49113		 CWE-502 High
Public exploit available
Exploited
 - 01.06.2025 SB2025060101
SB2025060331
SB2025060332
and 4 more
#VU106253 - Improper input validation
CVE-2025-22870		 CWE-20 Medium
Public exploit available
No
 - 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU103932 - Missing release of memory after effective lifetime
CVE-2025-22866		 CWE-401 Low
No
No
 - 12.02.2025 SB20250212100
SB20250212101
SB20250212102
and 27 more
#VU103457 - Improper input validation
CVE-2024-45341		 CWE-20 Low
No
No
 - 30.01.2025 SB2025013039
SB2025013043
SB2025013044
and 23 more
#VU103455 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45336		 CWE-200 Low
No
No
 - 30.01.2025 SB2025013039
SB2025013043
SB2025013044
and 38 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 - 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041		 CWE-601 Medium
No
No
 - 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU51743 - Integer overflow
CVE-2021-26825		 CWE-190 High
No
No
 - 26.03.2021 SB2021032628
SB2021032629
SB20230820160
and 1 more
#VU24676 - Double Free
CVE-2019-2126		 CWE-415 High
No
No
 - 27.01.2020 SB2019082018
SB2019092728
SB2020012713
and 5 more


Showing elements 3341 - 3360 out of 14196